# Traefik static configuration
# Handles TLS termination on port 9443 with private CA mTLS.
# Dynamic routing config is in dynamic.yml (hot-reloaded on change).

entryPoints:
  websecure:
    address: ":9443"

providers:
  file:
    filename: /etc/traefik/dynamic.yml
    watch: true          # reload dynamic.yml without container restart

log:
  level: INFO

accessLog:
  filePath: "/dev/stdout"
  format: common