tls:
  options:
    default:
      minVersion: VersionTLS13

http:
  serversTransports:
    http1:
      disableHTTP2: true
    http1insecure:
      disableHTTP2: true
      insecureSkipVerify: true

  routers:
    unifi-protect:
      rule: "Host(`protect.playne.au`)"
      service: unifi-protect
      tls:
        certResolver: le
      entrypoints:
        - websecure
      middlewares:
        - forward-auth@docker
    planes:
      rule: "Host(`planes.playne.au`)"
      service: planes
      tls:
        certResolver: le
      entrypoints:
        - websecure
      middlewares:
        - forward-auth@docker
    router:
      rule: "Host(`router.playne.au`)"
      service: router
      tls:
        certResolver: le
      entrypoints:
        - websecure
      middlewares:
        - forward-auth@docker

#  middlewares:

  services:
    unifi-protect:
      loadBalancer:
        serversTransport: http1insecure
        servers:
          - url: "https://10.10.20.10/"
    planes:
      loadBalancer:
        serversTransport: http1
        servers:
          - url: "http://10.10.20.200:8080/"
    router:
      loadBalancer:
        serversTransport: http1
        servers:
          - url: "http://10.10.20.1/"