# Traefik动态配置文件
# 这里可以添加动态路由、中间件等配置

# HTTP路由示例
http:
  routers:
    # 测试路由
    test-router:
      rule: "Host(`test.service.consul`)"
      service: "test-service"
      entryPoints:
        - "https"
      tls:
        certResolver: "default"
  
  services:
    # 测试服务
    test-service:
      loadBalancer:
        servers:
          - url: "http://127.0.0.1:8080"
        passHostHeader: true

  middlewares:
    # 基本认证中间件
    basic-auth:
      basicAuth:
        users:
          - "test:$apr1$H6uskkkW$IgXLP6ewTrSuBkTrqE8wj/"
    
    # 安全头中间件
    security-headers:
      headers:
        sslRedirect: true
        stsSeconds: 31536000
        stsIncludeSubdomains: true
        stsPreload: true
        forceSTSHeader: true
        customFrameOptionsValue: "SAMEORIGIN"
        contentTypeNosniff: true
        browserXssFilter: true

# TCP路由示例
tcp:
  routers:
    # TCP测试路由
    tcp-test-router:
      rule: "HostSNI(`*`)"
      service: "tcp-test-service"
      entryPoints:
        - "https"
  
  services:
    # TCP测试服务
    tcp-test-service:
      loadBalancer:
        servers:
          - address: "127.0.0.1:8080"