Static Configuration: Environment variables

TRAEFIK_ACCESSLOG:

Access log settings. (Default: false)

TRAEFIK_ACCESSLOG_BUFFERINGSIZE:

Number of access log lines to process in a buffered way. (Default: 0)

TRAEFIK_ACCESSLOG_FIELDS_DEFAULTMODE:

Default mode for fields: keep | drop (Default: keep)

TRAEFIK_ACCESSLOG_FIELDS_HEADERS_DEFAULTMODE:

Default mode for fields: keep | drop | redact (Default: drop)

TRAEFIK_ACCESSLOG_FIELDS_HEADERS_NAMES_:

Override mode for headers

TRAEFIK_ACCESSLOG_FIELDS_NAMES_:

Override mode for fields

TRAEFIK_ACCESSLOG_FILEPATH:

Access log file path. Stdout is used when omitted or empty.

TRAEFIK_ACCESSLOG_FILTERS_MINDURATION:

Keep access logs when request took longer than the specified duration. (Default: 0)

TRAEFIK_ACCESSLOG_FILTERS_RETRYATTEMPTS:

Keep access logs when at least one retry happened. (Default: false)

TRAEFIK_ACCESSLOG_FILTERS_STATUSCODES:

Keep access logs with status codes in the specified range.

TRAEFIK_ACCESSLOG_FORMAT:

Access log format: json | common (Default: common)

TRAEFIK_API:

Enable api/dashboard. (Default: false)

TRAEFIK_API_DASHBOARD:

Activate dashboard. (Default: true)

TRAEFIK_API_DEBUG:

Enable additional endpoints for debugging and profiling. (Default: false)

TRAEFIK_API_INSECURE:

Activate API directly on the entryPoint named traefik. (Default: false)

TRAEFIK_CERTIFICATESRESOLVERS_:

Certificates resolvers configuration. (Default: false)

TRAEFIK_CERTIFICATESRESOLVERS__ACME_CASERVER:

CA server to use. (Default: https://acme\-v02.api.letsencrypt.org/directory)

TRAEFIK_CERTIFICATESRESOLVERS__ACME_DNSCHALLENGE:

Activate DNS-01 Challenge. (Default: false)

TRAEFIK_CERTIFICATESRESOLVERS__ACME_DNSCHALLENGE_DELAYBEFORECHECK:

Assume DNS propagates after a delay in seconds rather than finding and querying nameservers. (Default: 0)

TRAEFIK_CERTIFICATESRESOLVERS__ACME_DNSCHALLENGE_DISABLEPROPAGATIONCHECK:

Disable the DNS propagation checks before notifying ACME that the DNS challenge is ready. [not recommended] (Default: false)

TRAEFIK_CERTIFICATESRESOLVERS__ACME_DNSCHALLENGE_PROVIDER:

Use a DNS-01 based challenge provider rather than HTTPS.

TRAEFIK_CERTIFICATESRESOLVERS__ACME_DNSCHALLENGE_RESOLVERS:

Use following DNS servers to resolve the FQDN authority.

TRAEFIK_CERTIFICATESRESOLVERS__ACME_EMAIL:

Email address used for registration.

TRAEFIK_CERTIFICATESRESOLVERS__ACME_HTTPCHALLENGE:

Activate HTTP-01 Challenge. (Default: false)

TRAEFIK_CERTIFICATESRESOLVERS__ACME_HTTPCHALLENGE_ENTRYPOINT:

HTTP challenge EntryPoint

TRAEFIK_CERTIFICATESRESOLVERS__ACME_KEYTYPE:

KeyType used for generating certificate private key. Allow value 'EC256', 'EC384', 'RSA2048', 'RSA4096', 'RSA8192'. (Default: RSA4096)

TRAEFIK_CERTIFICATESRESOLVERS__ACME_STORAGE:

Storage to use. (Default: acme.json)

TRAEFIK_CERTIFICATESRESOLVERS__ACME_TLSCHALLENGE:

Activate TLS-ALPN-01 Challenge. (Default: true)

TRAEFIK_ENTRYPOINTS_:

Entry points definition. (Default: false)

TRAEFIK_ENTRYPOINTS__ADDRESS:

Entry point address.

TRAEFIK_ENTRYPOINTS__FORWARDEDHEADERS_INSECURE:

Trust all forwarded headers. (Default: false)

TRAEFIK_ENTRYPOINTS__FORWARDEDHEADERS_TRUSTEDIPS:

Trust only forwarded headers from selected IPs.

TRAEFIK_ENTRYPOINTS__HTTP:

HTTP configuration.

TRAEFIK_ENTRYPOINTS__HTTP_MIDDLEWARES:

Default middlewares for the routers linked to the entry point.

TRAEFIK_ENTRYPOINTS__HTTP_REDIRECTIONS_ENTRYPOINT_PERMANENT:

Applies a permanent redirection. (Default: true)

TRAEFIK_ENTRYPOINTS__HTTP_REDIRECTIONS_ENTRYPOINT_PRIORITY:

Priority of the generated router. (Default: 2147483647)

TRAEFIK_ENTRYPOINTS__HTTP_REDIRECTIONS_ENTRYPOINT_SCHEME:

Scheme used for the redirection. (Default: https)

TRAEFIK_ENTRYPOINTS__HTTP_REDIRECTIONS_ENTRYPOINT_TO:

Targeted entry point of the redirection.

TRAEFIK_ENTRYPOINTS__HTTP_TLS:

Default TLS configuration for the routers linked to the entry point. (Default: false)

TRAEFIK_ENTRYPOINTS__HTTP_TLS_CERTRESOLVER:

Default certificate resolver for the routers linked to the entry point.

TRAEFIK_ENTRYPOINTS__HTTP_TLS_DOMAINS:

Default TLS domains for the routers linked to the entry point.

TRAEFIK_ENTRYPOINTS__HTTP_TLS_DOMAINS[n]_MAIN:

Default subject name.

TRAEFIK_ENTRYPOINTS__HTTP_TLS_DOMAINS[n]_SANS:

Subject alternative names.

TRAEFIK_ENTRYPOINTS__HTTP_TLS_OPTIONS:

Default TLS options for the routers linked to the entry point.

TRAEFIK_ENTRYPOINTS__PROXYPROTOCOL:

Proxy-Protocol configuration. (Default: false)

TRAEFIK_ENTRYPOINTS__PROXYPROTOCOL_INSECURE:

Trust all. (Default: false)

TRAEFIK_ENTRYPOINTS__PROXYPROTOCOL_TRUSTEDIPS:

Trust only selected IPs.

TRAEFIK_ENTRYPOINTS__TRANSPORT_LIFECYCLE_GRACETIMEOUT:

Duration to give active requests a chance to finish before Traefik stops. (Default: 10)

TRAEFIK_ENTRYPOINTS__TRANSPORT_LIFECYCLE_REQUESTACCEPTGRACETIMEOUT:

Duration to keep accepting requests before Traefik initiates the graceful shutdown procedure. (Default: 0)

TRAEFIK_ENTRYPOINTS__TRANSPORT_RESPONDINGTIMEOUTS_IDLETIMEOUT:

IdleTimeout is the maximum amount duration an idle (keep-alive) connection will remain idle before closing itself. If zero, no timeout is set. (Default: 180)

TRAEFIK_ENTRYPOINTS__TRANSPORT_RESPONDINGTIMEOUTS_READTIMEOUT:

ReadTimeout is the maximum duration for reading the entire request, including the body. If zero, no timeout is set. (Default: 0)

TRAEFIK_ENTRYPOINTS__TRANSPORT_RESPONDINGTIMEOUTS_WRITETIMEOUT:

WriteTimeout is the maximum duration before timing out writes of the response. If zero, no timeout is set. (Default: 0)

TRAEFIK_GLOBAL_CHECKNEWVERSION:

Periodically check if a new version has been released. (Default: false)

TRAEFIK_GLOBAL_SENDANONYMOUSUSAGE:

Periodically send anonymous usage statistics. If the option is not specified, it will be enabled by default. (Default: false)

TRAEFIK_HOSTRESOLVER:

Enable CNAME Flattening. (Default: false)

TRAEFIK_HOSTRESOLVER_CNAMEFLATTENING:

A flag to enable/disable CNAME flattening (Default: false)

TRAEFIK_HOSTRESOLVER_RESOLVCONFIG:

resolv.conf used for DNS resolving (Default: /etc/resolv.conf)

TRAEFIK_HOSTRESOLVER_RESOLVDEPTH:

The maximal depth of DNS recursive resolving (Default: 5)

TRAEFIK_LOG:

Traefik log settings. (Default: false)

TRAEFIK_LOG_FILEPATH:

Traefik log file path. Stdout is used when omitted or empty.

TRAEFIK_LOG_FORMAT:

Traefik log format: json | common (Default: common)

TRAEFIK_LOG_LEVEL:

Log level set to traefik logs. (Default: ERROR)

TRAEFIK_METRICS_DATADOG:

Datadog metrics exporter type. (Default: false)

TRAEFIK_METRICS_DATADOG_ADDENTRYPOINTSLABELS:

Enable metrics on entry points. (Default: true)

TRAEFIK_METRICS_DATADOG_ADDRESS:

Datadog's address. (Default: localhost:8125)

TRAEFIK_METRICS_DATADOG_ADDSERVICESLABELS:

Enable metrics on services. (Default: true)

TRAEFIK_METRICS_DATADOG_PUSHINTERVAL:

Datadog push interval. (Default: 10)

TRAEFIK_METRICS_INFLUXDB:

InfluxDB metrics exporter type. (Default: false)

TRAEFIK_METRICS_INFLUXDB_ADDENTRYPOINTSLABELS:

Enable metrics on entry points. (Default: true)

TRAEFIK_METRICS_INFLUXDB_ADDRESS:

InfluxDB address. (Default: localhost:8089)

TRAEFIK_METRICS_INFLUXDB_ADDSERVICESLABELS:

Enable metrics on services. (Default: true)

TRAEFIK_METRICS_INFLUXDB_DATABASE:

InfluxDB database used when protocol is http.

TRAEFIK_METRICS_INFLUXDB_PASSWORD:

InfluxDB password (only with http).

TRAEFIK_METRICS_INFLUXDB_PROTOCOL:

InfluxDB address protocol (udp or http). (Default: udp)

TRAEFIK_METRICS_INFLUXDB_PUSHINTERVAL:

InfluxDB push interval. (Default: 10)

TRAEFIK_METRICS_INFLUXDB_RETENTIONPOLICY:

InfluxDB retention policy used when protocol is http.

TRAEFIK_METRICS_INFLUXDB_USERNAME:

InfluxDB username (only with http).

TRAEFIK_METRICS_PROMETHEUS:

Prometheus metrics exporter type. (Default: false)

TRAEFIK_METRICS_PROMETHEUS_ADDENTRYPOINTSLABELS:

Enable metrics on entry points. (Default: true)

TRAEFIK_METRICS_PROMETHEUS_ADDSERVICESLABELS:

Enable metrics on services. (Default: true)

TRAEFIK_METRICS_PROMETHEUS_BUCKETS:

Buckets for latency metrics. (Default: 0.100000, 0.300000, 1.200000, 5.000000)

TRAEFIK_METRICS_PROMETHEUS_ENTRYPOINT:

EntryPoint (Default: traefik)

TRAEFIK_METRICS_PROMETHEUS_MANUALROUTING:

Manual routing (Default: false)

TRAEFIK_METRICS_STATSD:

StatsD metrics exporter type. (Default: false)

TRAEFIK_METRICS_STATSD_ADDENTRYPOINTSLABELS:

Enable metrics on entry points. (Default: true)

TRAEFIK_METRICS_STATSD_ADDRESS:

StatsD address. (Default: localhost:8125)

TRAEFIK_METRICS_STATSD_ADDSERVICESLABELS:

Enable metrics on services. (Default: true)

TRAEFIK_METRICS_STATSD_PREFIX:

Prefix to use for metrics collection. (Default: traefik)

TRAEFIK_METRICS_STATSD_PUSHINTERVAL:

StatsD push interval. (Default: 10)

TRAEFIK_PING:

Enable ping. (Default: false)

TRAEFIK_PING_ENTRYPOINT:

EntryPoint (Default: traefik)

TRAEFIK_PING_MANUALROUTING:

Manual routing (Default: false)

TRAEFIK_PROVIDERS_CONSUL:

Enable Consul backend with default settings. (Default: false)

TRAEFIK_PROVIDERS_CONSULCATALOG_CACHE:

Use local agent caching for catalog reads. (Default: false)

TRAEFIK_PROVIDERS_CONSULCATALOG_CONSTRAINTS:

Constraints is an expression that Traefik matches against the container's labels to determine whether to create any route for that container.

TRAEFIK_PROVIDERS_CONSULCATALOG_DEFAULTRULE:

Default rule. (Default: Host({{ normalize .Name }}))

TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_ADDRESS:

The address of the Consul server (Default: http://127.0.0.1:8500)

TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_DATACENTER:

Data center to use. If not provided, the default agent data center is used

TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_ENDPOINTWAITTIME:

WaitTime limits how long a Watch will block. If not provided, the agent default values will be used (Default: 0)

TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_HTTPAUTH_PASSWORD:

Basic Auth password

TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_HTTPAUTH_USERNAME:

Basic Auth username

TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_SCHEME:

The URI scheme for the Consul server

TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_TLS_CA:

TLS CA

TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_TLS_CAOPTIONAL:

TLS CA.Optional (Default: false)

TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_TLS_CERT:

TLS cert

TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_TLS_INSECURESKIPVERIFY:

TLS insecure skip verify (Default: false)

TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_TLS_KEY:

TLS key

TRAEFIK_PROVIDERS_CONSULCATALOG_ENDPOINT_TOKEN:

Token is used to provide a per-request ACL token which overrides the agent's default token

TRAEFIK_PROVIDERS_CONSULCATALOG_EXPOSEDBYDEFAULT:

Expose containers by default. (Default: true)

TRAEFIK_PROVIDERS_CONSULCATALOG_PREFIX:

Prefix for consul service tags. Default 'traefik' (Default: traefik)

TRAEFIK_PROVIDERS_CONSULCATALOG_REFRESHINTERVAL:

Interval for check Consul API. Default 100ms (Default: 15)

TRAEFIK_PROVIDERS_CONSULCATALOG_REQUIRECONSISTENT:

Forces the read to be fully consistent. (Default: false)

TRAEFIK_PROVIDERS_CONSULCATALOG_STALE:

Use stale consistency for catalog reads. (Default: false)

TRAEFIK_PROVIDERS_CONSUL_ENDPOINTS:

KV store endpoints (Default: 127.0.0.1:8500)

TRAEFIK_PROVIDERS_CONSUL_PASSWORD:

KV Password

TRAEFIK_PROVIDERS_CONSUL_ROOTKEY:

Root key used for KV store (Default: traefik)

TRAEFIK_PROVIDERS_CONSUL_TLS_CA:

TLS CA

TRAEFIK_PROVIDERS_CONSUL_TLS_CAOPTIONAL:

TLS CA.Optional (Default: false)

TRAEFIK_PROVIDERS_CONSUL_TLS_CERT:

TLS cert

TRAEFIK_PROVIDERS_CONSUL_TLS_INSECURESKIPVERIFY:

TLS insecure skip verify (Default: false)

TRAEFIK_PROVIDERS_CONSUL_TLS_KEY:

TLS key

TRAEFIK_PROVIDERS_CONSUL_USERNAME:

KV Username

TRAEFIK_PROVIDERS_DOCKER:

Enable Docker backend with default settings. (Default: false)

TRAEFIK_PROVIDERS_DOCKER_CONSTRAINTS:

Constraints is an expression that Traefik matches against the container's labels to determine whether to create any route for that container.

TRAEFIK_PROVIDERS_DOCKER_DEFAULTRULE:

Default rule. (Default: Host({{ normalize .Name }}))

TRAEFIK_PROVIDERS_DOCKER_ENDPOINT:

Docker server endpoint. Can be a tcp or a unix socket endpoint. (Default: unix:///var/run/docker.sock)

TRAEFIK_PROVIDERS_DOCKER_EXPOSEDBYDEFAULT:

Expose containers by default. (Default: true)

TRAEFIK_PROVIDERS_DOCKER_NETWORK:

Default Docker network used.

TRAEFIK_PROVIDERS_DOCKER_SWARMMODE:

Use Docker on Swarm Mode. (Default: false)

TRAEFIK_PROVIDERS_DOCKER_SWARMMODEREFRESHSECONDS:

Polling interval for swarm mode. (Default: 15)

TRAEFIK_PROVIDERS_DOCKER_TLS_CA:

TLS CA

TRAEFIK_PROVIDERS_DOCKER_TLS_CAOPTIONAL:

TLS CA.Optional (Default: false)

TRAEFIK_PROVIDERS_DOCKER_TLS_CERT:

TLS cert

TRAEFIK_PROVIDERS_DOCKER_TLS_INSECURESKIPVERIFY:

TLS insecure skip verify (Default: false)

TRAEFIK_PROVIDERS_DOCKER_TLS_KEY:

TLS key

TRAEFIK_PROVIDERS_DOCKER_USEBINDPORTIP:

Use the ip address from the bound port, rather than from the inner network. (Default: false)

TRAEFIK_PROVIDERS_DOCKER_WATCH:

Watch Docker Swarm events. (Default: true)

TRAEFIK_PROVIDERS_ETCD:

Enable Etcd backend with default settings. (Default: false)

TRAEFIK_PROVIDERS_ETCD_ENDPOINTS:

KV store endpoints (Default: 127.0.0.1:2379)

TRAEFIK_PROVIDERS_ETCD_PASSWORD:

KV Password

TRAEFIK_PROVIDERS_ETCD_ROOTKEY:

Root key used for KV store (Default: traefik)

TRAEFIK_PROVIDERS_ETCD_TLS_CA:

TLS CA

TRAEFIK_PROVIDERS_ETCD_TLS_CAOPTIONAL:

TLS CA.Optional (Default: false)

TRAEFIK_PROVIDERS_ETCD_TLS_CERT:

TLS cert

TRAEFIK_PROVIDERS_ETCD_TLS_INSECURESKIPVERIFY:

TLS insecure skip verify (Default: false)

TRAEFIK_PROVIDERS_ETCD_TLS_KEY:

TLS key

TRAEFIK_PROVIDERS_ETCD_USERNAME:

KV Username

TRAEFIK_PROVIDERS_FILE_DEBUGLOGGENERATEDTEMPLATE:

Enable debug logging of generated configuration template. (Default: false)

TRAEFIK_PROVIDERS_FILE_DIRECTORY:

Load dynamic configuration from one or more .toml or .yml files in a directory.

TRAEFIK_PROVIDERS_FILE_FILENAME:

Load dynamic configuration from a file.

TRAEFIK_PROVIDERS_FILE_WATCH:

Watch provider. (Default: true)

TRAEFIK_PROVIDERS_KUBERNETESCRD:

Enable Kubernetes backend with default settings. (Default: false)

TRAEFIK_PROVIDERS_KUBERNETESCRD_CERTAUTHFILEPATH:

Kubernetes certificate authority file path (not needed for in-cluster client).

TRAEFIK_PROVIDERS_KUBERNETESCRD_DISABLEPASSHOSTHEADERS:

Kubernetes disable PassHost Headers. (Default: false)

TRAEFIK_PROVIDERS_KUBERNETESCRD_ENDPOINT:

Kubernetes server endpoint (required for external cluster client).

TRAEFIK_PROVIDERS_KUBERNETESCRD_INGRESSCLASS:

Value of kubernetes.io/ingress.class annotation to watch for.

TRAEFIK_PROVIDERS_KUBERNETESCRD_LABELSELECTOR:

Kubernetes label selector to use.

TRAEFIK_PROVIDERS_KUBERNETESCRD_NAMESPACES:

Kubernetes namespaces.

TRAEFIK_PROVIDERS_KUBERNETESCRD_THROTTLEDURATION:

Ingress refresh throttle duration (Default: 0)

TRAEFIK_PROVIDERS_KUBERNETESCRD_TOKEN:

Kubernetes bearer token (not needed for in-cluster client).

TRAEFIK_PROVIDERS_KUBERNETESINGRESS:

Enable Kubernetes backend with default settings. (Default: false)

TRAEFIK_PROVIDERS_KUBERNETESINGRESS_CERTAUTHFILEPATH:

Kubernetes certificate authority file path (not needed for in-cluster client).

TRAEFIK_PROVIDERS_KUBERNETESINGRESS_DISABLEPASSHOSTHEADERS:

Kubernetes disable PassHost Headers. (Default: false)

TRAEFIK_PROVIDERS_KUBERNETESINGRESS_ENDPOINT:

Kubernetes server endpoint (required for external cluster client).

TRAEFIK_PROVIDERS_KUBERNETESINGRESS_INGRESSCLASS:

Value of kubernetes.io/ingress.class annotation to watch for.

TRAEFIK_PROVIDERS_KUBERNETESINGRESS_INGRESSENDPOINT_HOSTNAME:

Hostname used for Kubernetes Ingress endpoints.

TRAEFIK_PROVIDERS_KUBERNETESINGRESS_INGRESSENDPOINT_IP:

IP used for Kubernetes Ingress endpoints.

TRAEFIK_PROVIDERS_KUBERNETESINGRESS_INGRESSENDPOINT_PUBLISHEDSERVICE:

Published Kubernetes Service to copy status from.

TRAEFIK_PROVIDERS_KUBERNETESINGRESS_LABELSELECTOR:

Kubernetes Ingress label selector to use.

TRAEFIK_PROVIDERS_KUBERNETESINGRESS_NAMESPACES:

Kubernetes namespaces.

TRAEFIK_PROVIDERS_KUBERNETESINGRESS_THROTTLEDURATION:

Ingress refresh throttle duration (Default: 0)

TRAEFIK_PROVIDERS_KUBERNETESINGRESS_TOKEN:

Kubernetes bearer token (not needed for in-cluster client).

TRAEFIK_PROVIDERS_MARATHON:

Enable Marathon backend with default settings. (Default: false)

TRAEFIK_PROVIDERS_MARATHON_BASIC_HTTPBASICAUTHUSER:

Basic authentication User.

TRAEFIK_PROVIDERS_MARATHON_BASIC_HTTPBASICPASSWORD:

Basic authentication Password.

TRAEFIK_PROVIDERS_MARATHON_CONSTRAINTS:

Constraints is an expression that Traefik matches against the application's labels to determine whether to create any route for that application.

TRAEFIK_PROVIDERS_MARATHON_DCOSTOKEN:

DCOSToken for DCOS environment, This will override the Authorization header.

TRAEFIK_PROVIDERS_MARATHON_DEFAULTRULE:

Default rule. (Default: Host({{ normalize .Name }}))

TRAEFIK_PROVIDERS_MARATHON_DIALERTIMEOUT:

Set a dialer timeout for Marathon. (Default: 5)

TRAEFIK_PROVIDERS_MARATHON_ENDPOINT:

Marathon server endpoint. You can also specify multiple endpoint for Marathon. (Default: http://127.0.0.1:8080)

TRAEFIK_PROVIDERS_MARATHON_EXPOSEDBYDEFAULT:

Expose Marathon apps by default. (Default: true)

TRAEFIK_PROVIDERS_MARATHON_FORCETASKHOSTNAME:

Force to use the task's hostname. (Default: false)

TRAEFIK_PROVIDERS_MARATHON_KEEPALIVE:

Set a TCP Keep Alive time. (Default: 10)

TRAEFIK_PROVIDERS_MARATHON_RESPECTREADINESSCHECKS:

Filter out tasks with non-successful readiness checks during deployments. (Default: false)

TRAEFIK_PROVIDERS_MARATHON_RESPONSEHEADERTIMEOUT:

Set a response header timeout for Marathon. (Default: 60)

TRAEFIK_PROVIDERS_MARATHON_TLSHANDSHAKETIMEOUT:

Set a TLS handshake timeout for Marathon. (Default: 5)

TRAEFIK_PROVIDERS_MARATHON_TLS_CA:

TLS CA

TRAEFIK_PROVIDERS_MARATHON_TLS_CAOPTIONAL:

TLS CA.Optional (Default: false)

TRAEFIK_PROVIDERS_MARATHON_TLS_CERT:

TLS cert

TRAEFIK_PROVIDERS_MARATHON_TLS_INSECURESKIPVERIFY:

TLS insecure skip verify (Default: false)

TRAEFIK_PROVIDERS_MARATHON_TLS_KEY:

TLS key

TRAEFIK_PROVIDERS_MARATHON_TRACE:

Display additional provider logs. (Default: false)

TRAEFIK_PROVIDERS_MARATHON_WATCH:

Watch provider. (Default: true)

TRAEFIK_PROVIDERS_PROVIDERSTHROTTLEDURATION:

Backends throttle duration: minimum duration between 2 events from providers before applying a new configuration. It avoids unnecessary reloads if multiples events are sent in a short amount of time. (Default: 0)

TRAEFIK_PROVIDERS_RANCHER:

Enable Rancher backend with default settings. (Default: false)

TRAEFIK_PROVIDERS_RANCHER_CONSTRAINTS:

Constraints is an expression that Traefik matches against the container's labels to determine whether to create any route for that container.

TRAEFIK_PROVIDERS_RANCHER_DEFAULTRULE:

Default rule. (Default: Host({{ normalize .Name }}))

TRAEFIK_PROVIDERS_RANCHER_ENABLESERVICEHEALTHFILTER:

Filter services with unhealthy states and inactive states. (Default: true)

TRAEFIK_PROVIDERS_RANCHER_EXPOSEDBYDEFAULT:

Expose containers by default. (Default: true)

TRAEFIK_PROVIDERS_RANCHER_INTERVALPOLL:

Poll the Rancher metadata service every 'rancher.refreshseconds' (less accurate). (Default: false)

TRAEFIK_PROVIDERS_RANCHER_PREFIX:

Prefix used for accessing the Rancher metadata service. (Default: latest)

TRAEFIK_PROVIDERS_RANCHER_REFRESHSECONDS:

Defines the polling interval in seconds. (Default: 15)

TRAEFIK_PROVIDERS_RANCHER_WATCH:

Watch provider. (Default: true)

TRAEFIK_PROVIDERS_REDIS:

Enable Redis backend with default settings. (Default: false)

TRAEFIK_PROVIDERS_REDIS_ENDPOINTS:

KV store endpoints (Default: 127.0.0.1:6379)

TRAEFIK_PROVIDERS_REDIS_PASSWORD:

KV Password

TRAEFIK_PROVIDERS_REDIS_ROOTKEY:

Root key used for KV store (Default: traefik)

TRAEFIK_PROVIDERS_REDIS_TLS_CA:

TLS CA

TRAEFIK_PROVIDERS_REDIS_TLS_CAOPTIONAL:

TLS CA.Optional (Default: false)

TRAEFIK_PROVIDERS_REDIS_TLS_CERT:

TLS cert

TRAEFIK_PROVIDERS_REDIS_TLS_INSECURESKIPVERIFY:

TLS insecure skip verify (Default: false)

TRAEFIK_PROVIDERS_REDIS_TLS_KEY:

TLS key

TRAEFIK_PROVIDERS_REDIS_USERNAME:

KV Username

TRAEFIK_PROVIDERS_REST:

Enable Rest backend with default settings. (Default: false)

TRAEFIK_PROVIDERS_REST_INSECURE:

Activate REST Provider directly on the entryPoint named traefik. (Default: false)

TRAEFIK_PROVIDERS_ZOOKEEPER:

Enable ZooKeeper backend with default settings. (Default: false)

TRAEFIK_PROVIDERS_ZOOKEEPER_ENDPOINTS:

KV store endpoints (Default: 127.0.0.1:2181)

TRAEFIK_PROVIDERS_ZOOKEEPER_PASSWORD:

KV Password

TRAEFIK_PROVIDERS_ZOOKEEPER_ROOTKEY:

Root key used for KV store (Default: traefik)

TRAEFIK_PROVIDERS_ZOOKEEPER_TLS_CA:

TLS CA

TRAEFIK_PROVIDERS_ZOOKEEPER_TLS_CAOPTIONAL:

TLS CA.Optional (Default: false)

TRAEFIK_PROVIDERS_ZOOKEEPER_TLS_CERT:

TLS cert

TRAEFIK_PROVIDERS_ZOOKEEPER_TLS_INSECURESKIPVERIFY:

TLS insecure skip verify (Default: false)

TRAEFIK_PROVIDERS_ZOOKEEPER_TLS_KEY:

TLS key

TRAEFIK_PROVIDERS_ZOOKEEPER_USERNAME:

KV Username

TRAEFIK_SERVERSTRANSPORT_FORWARDINGTIMEOUTS_DIALTIMEOUT:

The amount of time to wait until a connection to a backend server can be established. If zero, no timeout exists. (Default: 30)

TRAEFIK_SERVERSTRANSPORT_FORWARDINGTIMEOUTS_IDLECONNTIMEOUT:

The maximum period for which an idle HTTP keep-alive connection will remain open before closing itself (Default: 90)

TRAEFIK_SERVERSTRANSPORT_FORWARDINGTIMEOUTS_RESPONSEHEADERTIMEOUT:

The amount of time to wait for a server's response headers after fully writing the request (including its body, if any). If zero, no timeout exists. (Default: 0)

TRAEFIK_SERVERSTRANSPORT_INSECURESKIPVERIFY:

Disable SSL certificate verification. (Default: false)

TRAEFIK_SERVERSTRANSPORT_MAXIDLECONNSPERHOST:

If non-zero, controls the maximum idle (keep-alive) to keep per-host. If zero, DefaultMaxIdleConnsPerHost is used (Default: 0)

TRAEFIK_SERVERSTRANSPORT_ROOTCAS:

Add cert file for self-signed certificate.

TRAEFIK_TRACING:

OpenTracing configuration. (Default: false)

TRAEFIK_TRACING_DATADOG:

Settings for Datadog. (Default: false)

TRAEFIK_TRACING_DATADOG_BAGAGEPREFIXHEADERNAME:

Specifies the header name prefix that will be used to store baggage items in a map.

TRAEFIK_TRACING_DATADOG_DEBUG:

Enable Datadog debug. (Default: false)

TRAEFIK_TRACING_DATADOG_GLOBALTAG:

Key:Value tag to be set on all the spans.

TRAEFIK_TRACING_DATADOG_LOCALAGENTHOSTPORT:

Set datadog-agent's host:port that the reporter will used. (Default: localhost:8126)

TRAEFIK_TRACING_DATADOG_PARENTIDHEADERNAME:

Specifies the header name that will be used to store the parent ID.

TRAEFIK_TRACING_DATADOG_PRIORITYSAMPLING:

Enable priority sampling. When using distributed tracing, this option must be enabled in order to get all the parts of a distributed trace sampled. (Default: false)

TRAEFIK_TRACING_DATADOG_SAMPLINGPRIORITYHEADERNAME:

Specifies the header name that will be used to store the sampling priority.

TRAEFIK_TRACING_DATADOG_TRACEIDHEADERNAME:

Specifies the header name that will be used to store the trace ID.

TRAEFIK_TRACING_ELASTIC:

Settings for Elastic. (Default: false)

TRAEFIK_TRACING_ELASTIC_SECRETTOKEN:

Set the token used to connect to Elastic APM Server.

TRAEFIK_TRACING_ELASTIC_SERVERURL:

Set the URL of the Elastic APM server.

TRAEFIK_TRACING_ELASTIC_SERVICEENVIRONMENT:

Set the name of the environment Traefik is deployed in, e.g. 'production' or 'staging'.

TRAEFIK_TRACING_HAYSTACK:

Settings for Haystack. (Default: false)

TRAEFIK_TRACING_HAYSTACK_BAGGAGEPREFIXHEADERNAME:

Specifies the header name prefix that will be used to store baggage items in a map.

TRAEFIK_TRACING_HAYSTACK_GLOBALTAG:

Key:Value tag to be set on all the spans.

TRAEFIK_TRACING_HAYSTACK_LOCALAGENTHOST:

Set haystack-agent's host that the reporter will used. (Default: 127.0.0.1)

TRAEFIK_TRACING_HAYSTACK_LOCALAGENTPORT:

Set haystack-agent's port that the reporter will used. (Default: 35000)

TRAEFIK_TRACING_HAYSTACK_PARENTIDHEADERNAME:

Specifies the header name that will be used to store the parent ID.

TRAEFIK_TRACING_HAYSTACK_SPANIDHEADERNAME:

Specifies the header name that will be used to store the span ID.

TRAEFIK_TRACING_HAYSTACK_TRACEIDHEADERNAME:

Specifies the header name that will be used to store the trace ID.

TRAEFIK_TRACING_INSTANA:

Settings for Instana. (Default: false)

TRAEFIK_TRACING_INSTANA_LOCALAGENTHOST:

Set instana-agent's host that the reporter will used.

TRAEFIK_TRACING_INSTANA_LOCALAGENTPORT:

Set instana-agent's port that the reporter will used. (Default: 42699)

TRAEFIK_TRACING_INSTANA_LOGLEVEL:

Set instana-agent's log level. ('error','warn','info','debug') (Default: info)

TRAEFIK_TRACING_JAEGER:

Settings for Jaeger. (Default: false)

TRAEFIK_TRACING_JAEGER_COLLECTOR_ENDPOINT:

Instructs reporter to send spans to jaeger-collector at this URL.

TRAEFIK_TRACING_JAEGER_COLLECTOR_PASSWORD:

Password for basic http authentication when sending spans to jaeger-collector.

TRAEFIK_TRACING_JAEGER_COLLECTOR_USER:

User for basic http authentication when sending spans to jaeger-collector.

TRAEFIK_TRACING_JAEGER_GEN128BIT:

Generate 128 bit span IDs. (Default: false)

TRAEFIK_TRACING_JAEGER_LOCALAGENTHOSTPORT:

Set jaeger-agent's host:port that the reporter will used. (Default: 127.0.0.1:6831)

TRAEFIK_TRACING_JAEGER_PROPAGATION:

Which propagation format to use (jaeger/b3). (Default: jaeger)

TRAEFIK_TRACING_JAEGER_SAMPLINGPARAM:

Set the sampling parameter. (Default: 1.000000)

TRAEFIK_TRACING_JAEGER_SAMPLINGSERVERURL:

Set the sampling server url. (Default: http://localhost:5778/sampling)

TRAEFIK_TRACING_JAEGER_SAMPLINGTYPE:

Set the sampling type. (Default: const)

TRAEFIK_TRACING_JAEGER_TRACECONTEXTHEADERNAME:

Set the header to use for the trace-id. (Default: uber-trace-id)

TRAEFIK_TRACING_SERVICENAME:

Set the name for this service. (Default: traefik)

TRAEFIK_TRACING_SPANNAMELIMIT:

Set the maximum character limit for Span names (default 0 = no limit). (Default: 0)

TRAEFIK_TRACING_ZIPKIN:

Settings for Zipkin. (Default: false)

TRAEFIK_TRACING_ZIPKIN_HTTPENDPOINT:

HTTP Endpoint to report traces to. (Default: http://localhost:9411/api/v2/spans)

TRAEFIK_TRACING_ZIPKIN_ID128BIT:

Use Zipkin 128 bit root span IDs. (Default: true)

TRAEFIK_TRACING_ZIPKIN_SAMESPAN:

Use Zipkin SameSpan RPC style traces. (Default: false)

TRAEFIK_TRACING_ZIPKIN_SAMPLERATE:

The rate between 0.0 and 1.0 of requests to trace. (Default: 1.000000)