Project: Traefik (Orchestration & Management / API Gateway)
File: env-ref.md

<!-- CODE GENERATED AUTOMATICALLY THIS FILE MUST NOT BE EDITED BY HAND --> `TRAEFIK_ACCESSLOG`: Access log settings. (Default: ```false```) `TRAEFIKACCESSLOGADDINTERNALS`: Enables access log for internal services (ping, dashboard, etc...). (Default: ```false```) `TRAEFIKACCESSLOGBUFFERINGSIZE`: Number of access log lines to process in a buffered way. (Default: ```0```) `TRAEFIKACCESSLOGFIELDS_DEFAULTMODE`: Default mode for fields: keep | drop (Default: ```keep```) `TRAEFIKACCESSLOGFIELDSHEADERSDEFAULTMODE`: Default mode for fields: keep | drop | redact (Default: ```drop```) `TRAEFIKACCESSLOGFIELDSHEADERSNAMES_<NAME>`: Override mode for headers `TRAEFIKACCESSLOGFIELDSNAMES<NAME>`: Override mode for fields `TRAEFIKACCESSLOGFILEPATH`: Access log file path. Stdout is used when omitted or empty. `TRAEFIKACCESSLOGFILTERS_MINDURATION`: Keep access logs when request took longer than the specified duration. (Default: ```0```) `TRAEFIKACCESSLOGFILTERS_RETRYATTEMPTS`: Keep access logs when at least one retry happened. (Default: ```false```) `TRAEFIKACCESSLOGFILTERS_STATUSCODES`: Keep access logs with status codes in the specified range. `TRAEFIKACCESSLOGFORMAT`: Access log format: json | common (Default: ```common```) `TRAEFIK_API`: Enable api/dashboard. (Default: ```false```) `TRAEFIKAPIDASHBOARD`: Activate dashboard. (Default: ```true```) `TRAEFIKAPIDEBUG`: Enable additional endpoints for debugging and profiling. (Default: ```false```) `TRAEFIKAPIDISABLEDASHBOARDAD`: Disable ad in the dashboard. (Default: ```false```) `TRAEFIKAPIINSECURE`: Activate API directly on the entryPoint named traefik. (Default: ```false```) `TRAEFIKCERTIFICATESRESOLVERS<NAME>`: Certificates resolvers configuration. (Default: ```false```) `TRAEFIKCERTIFICATESRESOLVERS<NAME>ACMECASERVER`: CA server to use. (Default: ```https://acme-v02.api.letsencrypt.org/directory```) `TRAEFIKCERTIFICATESRESOLVERS<NAME>ACMECERTIFICATESDURATION`: Certificates' duration in hours. (Default: ```2160```) `TRAEFIKCERTIFICATESRESOLVERS<NAME>ACMEDNSCHALLENGE`: Activate DNS-01 Challenge. (Default: ```false```) `TRAEFIKCERTIFICATESRESOLVERS<NAME>ACMEDNSCHALLENGE_DELAYBEFORECHECK`: Assume DNS propagates after a delay in seconds rather than finding and querying nameservers. (Default: ```0```) `TRAEFIKCERTIFICATESRESOLVERS<NAME>ACMEDNSCHALLENGE_DISABLEPROPAGATIONCHECK`: Disable the DNS propagation checks before notifying ACME that the DNS challenge is ready. [not recommended] (Default: ```false```) `TRAEFIKCERTIFICATESRESOLVERS<NAME>ACMEDNSCHALLENGE_PROVIDER`: Use a DNS-01 based challenge provider rather than HTTPS. `TRAEFIKCERTIFICATESRESOLVERS<NAME>ACMEDNSCHALLENGE_RESOLVERS`: Use following DNS servers to resolve the FQDN authority. `TRAEFIKCERTIFICATESRESOLVERS<NAME>ACMEEAB_HMACENCODED`: Base64 encoded HMAC key from External CA. `TRAEFIKCERTIFICATESRESOLVERS<NAME>ACMEEAB_KID`: Key identifier from External CA. `TRAEFIKCERTIFICATESRESOLVERS<NAME>ACMEEMAIL`: Email address used for registration. `TRAEFIKCERTIFICATESRESOLVERS<NAME>ACMEHTTPCHALLENGE`: Activate HTTP-01 Challenge. (Default: ```false```) `TRAEFIKCERTIFICATESRESOLVERS<NAME>ACMEHTTPCHALLENGE_ENTRYPOINT`: HTTP challenge EntryPoint `TRAEFIKCERTIFICATESRESOLVERS<NAME>ACMEKEYTYPE`: KeyType used for generating certificate private key. Allow value 'EC256', 'EC384', 'RSA2048', 'RSA4096', 'RSA8192'. (Default: ```RSA4096```) `TRAEFIKCERTIFICATESRESOLVERS<NAME>ACMEPREFERREDCHAIN`: Preferred chain to use. `TRAEFIKCERTIFICATESRESOLVERS<NAME>ACMESTORAGE`: Storage to use. (Default: ```acme.json```) `TRAEFIKCERTIFICATESRESOLVERS<NAME>ACMETLSCHALLENGE`: Activate TLS-ALPN-01 Challenge. (Default: ```true```) `TRAEFIKCERTIFICATESRESOLVERS<NAME>_TAILSCALE`: Enables Tailscale certificate resolution. (Default: ```true```) `TRAEFIKCOREDEFAULTRULESYNTAX`: Defines the rule parser default syntax (v2 or v3) (Default: ```v3```) `TRAEFIKENTRYPOINTS<NAME>`: Entry points definition. (Default: ```false```) `TRAEFIKENTRYPOINTS<NAME>_ADDRESS`: Entry point address. `TRAEFIKENTRYPOINTS<NAME>_ASDEFAULT`: Adds this EntryPoint to the list of default EntryPoints to be used on routers that don't have any Entrypoint defined. (Default: ```false```) `TRAEFIKENTRYPOINTS<NAME>FORWARDEDHEADERSINSECURE`: Trust all forwarded headers. (Default: ```false```) `TRAEFIKENTRYPOINTS<NAME>FORWARDEDHEADERSTRUSTEDIPS`: Trust only forwarded headers from selected IPs. `TRAEFIKENTRYPOINTS<NAME>_HTTP`: HTTP configuration. `TRAEFIKENTRYPOINTS<NAME>HTTP2MAXCONCURRENTSTREAMS`: Specifies the number of concurrent streams per connection that each client is allowed to initiate. (Default: ```250```) `TRAEFIKENTRYPOINTS<NAME>_HTTP3`: HTTP/3 configuration. (Default: ```false```) `TRAEFIKENTRYPOINTS<NAME>HTTP3ADVERTISEDPORT`: UDP port to advertise, on which HTTP/3 is available. (Default: ```0```) `TRAEFIKENTRYPOINTS<NAME>HTTPENCODEQUERYSEMICOLONS`: Defines whether request query semicolons should be URLEncoded. (Default: ```false```) `TRAEFIKENTRYPOINTS<NAME>HTTPMIDDLEWARES`: Default middlewares for the routers linked to the entry point. `TRAEFIKENTRYPOINTS<NAME>HTTPREDIRECTIONSENTRYPOINTPERMANENT`: Applies a permanent redirection. (Default: ```true```) `TRAEFIKENTRYPOINTS<NAME>HTTPREDIRECTIONSENTRYPOINTPRIORITY`: Priority of the generated router. (Default: ```9223372036854775806```) `TRAEFIKENTRYPOINTS<NAME>HTTPREDIRECTIONSENTRYPOINTSCHEME`: Scheme used for the redirection. (Default: ```https```) `TRAEFIKENTRYPOINTS<NAME>HTTPREDIRECTIONSENTRYPOINTTO`: Targeted entry point of the redirection. `TRAEFIKENTRYPOINTS<NAME>HTTPTLS`: Default TLS configuration for the routers linked to the entry point. (Default: ```false```) `TRAEFIKENTRYPOINTS<NAME>HTTPTLS_CERTRESOLVER`: Default certificate resolver for the routers linked to the entry point. `TRAEFIKENTRYPOINTS<NAME>HTTPTLS_DOMAINS`: Default TLS domains for the routers linked to the entry point. `TRAEFIKENTRYPOINTS<NAME>HTTPTLSDOMAINSn_MAIN`: Default subject name. `TRAEFIKENTRYPOINTS<NAME>HTTPTLSDOMAINSn_SANS`: Subject alternative names. `TRAEFIKENTRYPOINTS<NAME>HTTPTLS_OPTIONS`: Default TLS options for the routers linked to the entry point. `TRAEFIKENTRYPOINTS<NAME>_PROXYPROTOCOL`: Proxy-Protocol configuration. (Default: ```false```) `TRAEFIKENTRYPOINTS<NAME>PROXYPROTOCOLINSECURE`: Trust all. (Default: ```false```) `TRAEFIKENTRYPOINTS<NAME>PROXYPROTOCOLTRUSTEDIPS`: Trust only selected

`TRAEFIKENTRYPOINTS<NAME>_REUSEPORT`: Enables EntryPoints from the same or different processes listening on the same TCP/UDP port. (Default: ```false```) `TRAEFIKENTRYPOINTS<NAME>TRANSPORTKEEPALIVEMAXREQUESTS`: Maximum number of requests before closing a keep-alive connection. (Default: ```0```) `TRAEFIKENTRYPOINTS<NAME>TRANSPORTKEEPALIVEMAXTIME`: Maximum duration before closing a keep-alive connection. (Default: ```0```) `TRAEFIKENTRYPOINTS<NAME>TRANSPORTLIFECYCLE_GRACETIMEOUT`: Duration to give active requests a chance to finish before Traefik stops. (Default: ```10```) `TRAEFIKENTRYPOINTS<NAME>TRANSPORTLIFECYCLE_REQUESTACCEPTGRACETIMEOUT`: Duration to keep accepting requests before Traefik initiates the graceful shutdown procedure. (Default: ```0```) `TRAEFIKENTRYPOINTS<NAME>TRANSPORTRESPONDINGTIMEOUTS_IDLETIMEOUT`: IdleTimeout is the maximum amount duration an idle (keep-alive) connection will remain idle before closing itself. If zero, no timeout is set. (Default: ```180```) `TRAEFIKENTRYPOINTS<NAME>TRANSPORTRESPONDINGTIMEOUTS_READTIMEOUT`: ReadTimeout is the maximum duration for reading the entire request, including the body. If zero, no timeout is set. (Default: ```60```) `TRAEFIKENTRYPOINTS<NAME>TRANSPORTRESPONDINGTIMEOUTS_WRITETIMEOUT`: WriteTimeout is the maximum duration before timing out writes of the response. If zero, no timeout is set. (Default: ```0```) `TRAEFIKENTRYPOINTS<NAME>UDPTIMEOUT`: Timeout defines how long to wait on an idle session before releasing the related resources. (Default: ```3```) `TRAEFIKEXPERIMENTALKUBERNETESGATEWAY`: Allow the Kubernetes gateway api provider usage. (Default: ```false```) `TRAEFIKEXPERIMENTALLOCALPLUGINS_<NAME>`: Local plugins configuration. (Default: ```false```) `TRAEFIKEXPERIMENTALLOCALPLUGINS<NAME>MODULENAME`: plugin's module name. `TRAEFIKEXPERIMENTALPLUGINS<NAME>MODULENAME`: plugin's module name. `TRAEFIKEXPERIMENTALPLUGINS<NAME>VERSION`: plugin's version. `TRAEFIKGLOBALCHECKNEWVERSION`: Periodically check if a new version has been released. (Default: ```true```) `TRAEFIKGLOBALSENDANONYMOUSUSAGE`: Periodically send anonymous usage statistics. If the option is not specified, it will be disabled by default. (Default: ```false```) `TRAEFIK_HOSTRESOLVER`: Enable CNAME Flattening. (Default: ```false```) `TRAEFIKHOSTRESOLVERCNAMEFLATTENING`: A flag to enable/disable CNAME flattening (Default: ```false```) `TRAEFIKHOSTRESOLVERRESOLVCONFIG`: resolv.conf used for DNS resolving (Default: ```/etc/resolv.conf```) `TRAEFIKHOSTRESOLVERRESOLVDEPTH`: The maximal depth of DNS recursive resolving (Default: ```5```) `TRAEFIK_LOG`: Traefik log settings. (Default: ```false```) `TRAEFIKLOGCOMPRESS`: Determines if the rotated log files should be compressed using gzip. (Default: ```false```) `TRAEFIKLOGFILEPATH`: Traefik log file path. Stdout is used when omitted or empty. `TRAEFIKLOGFORMAT`: Traefik log format: json | common (Default: ```common```) `TRAEFIKLOGLEVEL`: Log level set to traefik logs. (Default: ```ERROR```) `TRAEFIKLOGMAXAGE`: Maximum number of days to retain old log files based on the timestamp encoded in their filename. (Default: ```0```) `TRAEFIKLOGMAXBACKUPS`: Maximum number of old log files to retain. (Default: ```0```) `TRAEFIKLOGMAXSIZE`: Maximum size in megabytes of the log file before it gets rotated. (Default: ```0```) `TRAEFIKLOGNOCOLOR`: When using the 'common' format, disables the colorized output. (Default: ```false```) `TRAEFIKMETRICSADDINTERNALS`: Enables metrics for internal services (ping, dashboard, etc...). (Default: ```false```) `TRAEFIKMETRICSDATADOG`: Datadog metrics exporter type. (Default: ```false```) `TRAEFIKMETRICSDATADOG_ADDENTRYPOINTSLABELS`: Enable metrics on entry points. (Default: ```true```) `TRAEFIKMETRICSDATADOG_ADDRESS`: Datadog's address. (Default: ```localhost:8125```) `TRAEFIKMETRICSDATADOG_ADDROUTERSLABELS`: Enable metrics on routers. (Default: ```false```) `TRAEFIKMETRICSDATADOG_ADDSERVICESLABELS`: Enable metrics on services. (Default: ```true```) `TRAEFIKMETRICSDATADOG_PREFIX`: Prefix to use for metrics collection. (Default: ```traefik```) `TRAEFIKMETRICSDATADOG_PUSHINTERVAL`: Datadog push interval. (Default: ```10```) `TRAEFIKMETRICSINFLUXDB2`: InfluxDB v2 metrics exporter type. (Default: ```false```) `TRAEFIKMETRICSINFLUXDB2_ADDENTRYPOINTSLABELS`: Enable metrics on entry points. (Default: ```true```) `TRAEFIKMETRICSINFLUXDB2ADDITIONALLABELS<NAME>`: Additional labels (influxdb tags) on all metrics `TRAEFIKMETRICSINFLUXDB2_ADDRESS`: InfluxDB v2 address. (Default: ```http://localhost:8086```) `TRAEFIKMETRICSINFLUXDB2_ADDROUTERSLABELS`: Enable metrics on routers. (Default: ```false```) `TRAEFIKMETRICSINFLUXDB2_ADDSERVICESLABELS`: Enable metrics on services. (Default: ```true```) `TRAEFIKMETRICSINFLUXDB2_BUCKET`: InfluxDB v2 bucket ID. `TRAEFIKMETRICSINFLUXDB2_ORG`: InfluxDB v2 org ID. `TRAEFIKMETRICSINFLUXDB2_PUSHINTERVAL`: InfluxDB v2 push interval. (Default: ```10```) `TRAEFIKMETRICSINFLUXDB2_TOKEN`: InfluxDB v2 access token. `TRAEFIKMETRICSOTLP`: OpenTelemetry metrics exporter type. (Default: ```false```) `TRAEFIKMETRICSOTLP_ADDENTRYPOINTSLABELS`: Enable metrics on entry points. (Default: ```true```) `TRAEFIKMETRICSOTLP_ADDROUTERSLABELS`: Enable metrics on routers. (Default: ```false```) `TRAEFIKMETRICSOTLP_ADDSERVICESLABELS`: Enable metrics on services. (Default: ```true```) `TRAEFIKMETRICSOTLP_EXPLICITBOUNDARIES`: Boundaries for latency metrics. (Default: ```0.005000, 0.010000, 0.025000, 0.050000, 0.075000, 0.100000, 0.250000, 0.500000, 0.750000, 1.000000, 2.500000, 5.000000, 7.500000, 10.000000```) `TRAEFIKMETRICSOTLPGRPCENDPOINT`: Sets the gRPC endpoint (host:port) of the collector. (Default: ```localhost:4317```) `TRAEFIKMETRICSOTLPGRPCHEADERS_<NAME>`: Headers sent with payload. `TRAEFIKMETRICSOTLPGRPCINSECURE`: Disables client transport security for the

(Default: ```false```) `TRAEFIKMETRICSOTLPGRPCTLS_CA`: TLS CA `TRAEFIKMETRICSOTLPGRPCTLS_CERT`: TLS cert `TRAEFIKMETRICSOTLPGRPCTLS_INSECURESKIPVERIFY`: TLS insecure skip verify (Default: ```false```) `TRAEFIKMETRICSOTLPGRPCTLS_KEY`: TLS key `TRAEFIKMETRICSOTLPHTTPENDPOINT`: Sets the HTTP endpoint (scheme://host:port/path) of the collector. (Default: ```https://localhost:4318```) `TRAEFIKMETRICSOTLPHTTPHEADERS_<NAME>`: Headers sent with payload. `TRAEFIKMETRICSOTLPHTTPTLS_CA`: TLS CA `TRAEFIKMETRICSOTLPHTTPTLS_CERT`: TLS cert `TRAEFIKMETRICSOTLPHTTPTLS_INSECURESKIPVERIFY`: TLS insecure skip verify (Default: ```false```) `TRAEFIKMETRICSOTLPHTTPTLS_KEY`: TLS key `TRAEFIKMETRICSOTLP_PUSHINTERVAL`: Period between calls to collect a checkpoint. (Default: ```10```) `TRAEFIKMETRICSPROMETHEUS`: Prometheus metrics exporter type. (Default: ```false```) `TRAEFIKMETRICSPROMETHEUS_ADDENTRYPOINTSLABELS`: Enable metrics on entry points. (Default: ```true```) `TRAEFIKMETRICSPROMETHEUS_ADDROUTERSLABELS`: Enable metrics on routers. (Default: ```false```) `TRAEFIKMETRICSPROMETHEUS_ADDSERVICESLABELS`: Enable metrics on services. (Default: ```true```) `TRAEFIKMETRICSPROMETHEUS_BUCKETS`: Buckets for latency metrics. (Default: ```0.100000, 0.300000, 1.200000, 5.000000```) `TRAEFIKMETRICSPROMETHEUS_ENTRYPOINT`: EntryPoint (Default: ```traefik```) `TRAEFIKMETRICSPROMETHEUSHEADERLABELS<NAME>`: Defines the extra labels for the requests_total metrics, and for each of them, the request header containing the value for this label. `TRAEFIKMETRICSPROMETHEUS_MANUALROUTING`: Manual routing (Default: ```false```) `TRAEFIKMETRICSSTATSD`: StatsD metrics exporter type. (Default: ```false```) `TRAEFIKMETRICSSTATSD_ADDENTRYPOINTSLABELS`: Enable metrics on entry points. (Default: ```true```) `TRAEFIKMETRICSSTATSD_ADDRESS`: StatsD address. (Default: ```localhost:8125```) `TRAEFIKMETRICSSTATSD_ADDROUTERSLABELS`: Enable metrics on routers. (Default: ```false```) `TRAEFIKMETRICSSTATSD_ADDSERVICESLABELS`: Enable metrics on services. (Default: ```true```) `TRAEFIKMETRICSSTATSD_PREFIX`: Prefix to use for metrics collection. (Default: ```traefik```) `TRAEFIKMETRICSSTATSD_PUSHINTERVAL`: StatsD push interval. (Default: ```10```) `TRAEFIK_PING`: Enable ping. (Default: ```false```) `TRAEFIKPINGENTRYPOINT`: EntryPoint (Default: ```traefik```) `TRAEFIKPINGMANUALROUTING`: Manual routing (Default: ```false```) `TRAEFIKPINGTERMINATINGSTATUSCODE`: Terminating status code (Default: ```503```) `TRAEFIKPROVIDERSCONSUL`: Enable Consul backend with default settings. (Default: ```false```) `TRAEFIKPROVIDERSCONSULCATALOG`: Enable ConsulCatalog backend with default settings. (Default: ```false```) `TRAEFIKPROVIDERSCONSULCATALOG_CACHE`: Use local agent caching for catalog reads. (Default: ```false```) `TRAEFIKPROVIDERSCONSULCATALOG_CONNECTAWARE`: Enable Consul Connect support. (Default: ```false```) `TRAEFIKPROVIDERSCONSULCATALOG_CONNECTBYDEFAULT`: Consider every service as Connect capable by default. (Default: ```false```) `TRAEFIKPROVIDERSCONSULCATALOG_CONSTRAINTS`: Constraints is an expression that Traefik matches against the container's labels to determine whether to create any route for that container. `TRAEFIKPROVIDERSCONSULCATALOG_DEFAULTRULE`: Default rule. (Default: ```Host(`{{ normalize .Name }}`)```) `TRAEFIKPROVIDERSCONSULCATALOGENDPOINTADDRESS`: The address of the Consul server `TRAEFIKPROVIDERSCONSULCATALOGENDPOINTDATACENTER`: Data center to use. If not provided, the default agent data center is used `TRAEFIKPROVIDERSCONSULCATALOGENDPOINTENDPOINTWAITTIME`: WaitTime limits how long a Watch will block. If not provided, the agent default values will be used (Default: ```0```) `TRAEFIKPROVIDERSCONSULCATALOGENDPOINTHTTPAUTH_PASSWORD`: Basic Auth password `TRAEFIKPROVIDERSCONSULCATALOGENDPOINTHTTPAUTH_USERNAME`: Basic Auth username `TRAEFIKPROVIDERSCONSULCATALOGENDPOINTSCHEME`: The URI scheme for the Consul server `TRAEFIKPROVIDERSCONSULCATALOGENDPOINTTLS_CA`: TLS CA `TRAEFIKPROVIDERSCONSULCATALOGENDPOINTTLS_CERT`: TLS cert `TRAEFIKPROVIDERSCONSULCATALOGENDPOINTTLS_INSECURESKIPVERIFY`: TLS insecure skip verify (Default: ```false```) `TRAEFIKPROVIDERSCONSULCATALOGENDPOINTTLS_KEY`: TLS key `TRAEFIKPROVIDERSCONSULCATALOGENDPOINTTOKEN`: Token is used to provide a per-request ACL token which overrides the agent's default token `TRAEFIKPROVIDERSCONSULCATALOG_EXPOSEDBYDEFAULT`: Expose containers by default. (Default: ```true```) `TRAEFIKPROVIDERSCONSULCATALOG_NAMESPACES`: Sets the namespaces used to discover services (Consul Enterprise only). `TRAEFIKPROVIDERSCONSULCATALOG_PREFIX`: Prefix for consul service tags. (Default: ```traefik```) `TRAEFIKPROVIDERSCONSULCATALOG_REFRESHINTERVAL`: Interval for check Consul API. (Default: ```15```) `TRAEFIKPROVIDERSCONSULCATALOG_REQUIRECONSISTENT`: Forces the read to be fully consistent. (Default: ```false```) `TRAEFIKPROVIDERSCONSULCATALOG_SERVICENAME`: Name of the Traefik service in Consul Catalog (needs to be registered via the orchestrator or manually). (Default: ```traefik```) `TRAEFIKPROVIDERSCONSULCATALOG_STALE`: Use stale consistency for catalog reads. (Default: ```false```) `TRAEFIKPROVIDERSCONSULCATALOG_STRICTCHECKS`: A list of service health statuses to allow taking traffic. (Default: ```passing, warning```) `TRAEFIKPROVIDERSCONSULCATALOG_WATCH`: Watch Consul API events. (Default: ```false```) `TRAEFIKPROVIDERSCONSUL_ENDPOINTS`: KV store endpoints. (Default: ```127.0.0.1:8500```) `TRAEFIKPROVIDERSCONSUL_NAMESPACES`: Sets the namespaces used to discover the configuration (Consul Enterprise only). `TRAEFIKPROVIDERSCONSUL_ROOTKEY`: Root key used for KV store. (Default: ```traefik```) `TRAEFIKPROVIDERSCONSULTLSCA`: TLS CA `TRAEFIKPROVIDERSCONSULTLSCERT`: TLS cert `TRAEFIKPROVIDERSCONSULTLSINSECURESKIPVERIFY`: TLS insecure skip verify (Default: ```false```) `TRAEFIKPROVIDERSCONSULTLSKEY`: TLS key `TRAEFIKPROVIDERSCONSUL_TOKEN`: Per-request ACL token. `TRAEFIKPROVIDERSDOCKER`: Enable Docker backend with default settings. (Default: ```false```) `TRAEFIKPROVIDERSDOCKER_ALLOWEMPTYSERVICES`: Disregards the Docker containers health checks with respect to the creation or removal of the corresponding

(Default: ```false```) `TRAEFIKPROVIDERSDOCKER_CONSTRAINTS`: Constraints is an expression that Traefik matches against the container's labels to determine whether to create any route for that container. `TRAEFIKPROVIDERSDOCKER_DEFAULTRULE`: Default rule. (Default: ```Host(`{{ normalize .Name }}`)```) `TRAEFIKPROVIDERSDOCKER_ENDPOINT`: Docker server endpoint. Can be a TCP or a Unix socket endpoint. (Default: ```unix:///var/run/docker.sock```) `TRAEFIKPROVIDERSDOCKER_EXPOSEDBYDEFAULT`: Expose containers by default. (Default: ```true```) `TRAEFIKPROVIDERSDOCKER_HTTPCLIENTTIMEOUT`: Client timeout for HTTP connections. (Default: ```0```) `TRAEFIKPROVIDERSDOCKER_NETWORK`: Default Docker network used. `TRAEFIKPROVIDERSDOCKERTLSCA`: TLS CA `TRAEFIKPROVIDERSDOCKERTLSCERT`: TLS cert `TRAEFIKPROVIDERSDOCKERTLSINSECURESKIPVERIFY`: TLS insecure skip verify (Default: ```false```) `TRAEFIKPROVIDERSDOCKERTLSKEY`: TLS key `TRAEFIKPROVIDERSDOCKER_USEBINDPORTIP`: Use the ip address from the bound port, rather than from the inner network. (Default: ```false```) `TRAEFIKPROVIDERSDOCKER_WATCH`: Watch Docker events. (Default: ```true```) `TRAEFIKPROVIDERSECS`: Enable AWS ECS backend with default settings. (Default: ```false```) `TRAEFIKPROVIDERSECS_ACCESSKEYID`: AWS credentials access key ID to use for making requests. `TRAEFIKPROVIDERSECS_AUTODISCOVERCLUSTERS`: Auto discover cluster. (Default: ```false```) `TRAEFIKPROVIDERSECS_CLUSTERS`: ECS Cluster names. (Default: ```default```) `TRAEFIKPROVIDERSECS_CONSTRAINTS`: Constraints is an expression that Traefik matches against the container's labels to determine whether to create any route for that container. `TRAEFIKPROVIDERSECS_DEFAULTRULE`: Default rule. (Default: ```Host(`{{ normalize .Name }}`)```) `TRAEFIKPROVIDERSECS_ECSANYWHERE`: Enable ECS Anywhere support. (Default: ```false```) `TRAEFIKPROVIDERSECS_EXPOSEDBYDEFAULT`: Expose services by default. (Default: ```true```) `TRAEFIKPROVIDERSECS_HEALTHYTASKSONLY`: Determines whether to discover only healthy tasks. (Default: ```false```) `TRAEFIKPROVIDERSECS_REFRESHSECONDS`: Polling interval (in seconds). (Default: ```15```) `TRAEFIKPROVIDERSECS_REGION`: AWS region to use for requests. `TRAEFIKPROVIDERSECS_SECRETACCESSKEY`: AWS credentials access key to use for making requests. `TRAEFIKPROVIDERSETCD`: Enable Etcd backend with default settings. (Default: ```false```) `TRAEFIKPROVIDERSETCD_ENDPOINTS`: KV store endpoints. (Default: ```127.0.0.1:2379```) `TRAEFIKPROVIDERSETCD_PASSWORD`: Password for authentication. `TRAEFIKPROVIDERSETCD_ROOTKEY`: Root key used for KV store. (Default: ```traefik```) `TRAEFIKPROVIDERSETCDTLSCA`: TLS CA `TRAEFIKPROVIDERSETCDTLSCERT`: TLS cert `TRAEFIKPROVIDERSETCDTLSINSECURESKIPVERIFY`: TLS insecure skip verify (Default: ```false```) `TRAEFIKPROVIDERSETCDTLSKEY`: TLS key `TRAEFIKPROVIDERSETCD_USERNAME`: Username for authentication. `TRAEFIKPROVIDERSFILE_DEBUGLOGGENERATEDTEMPLATE`: Enable debug logging of generated configuration template. (Default: ```false```) `TRAEFIKPROVIDERSFILE_DIRECTORY`: Load dynamic configuration from one or more .yml or .toml files in a directory. `TRAEFIKPROVIDERSFILE_FILENAME`: Load dynamic configuration from a file. `TRAEFIKPROVIDERSFILE_WATCH`: Watch provider. (Default: ```true```) `TRAEFIKPROVIDERSHTTP`: Enable HTTP backend with default settings. (Default: ```false```) `TRAEFIKPROVIDERSHTTP_ENDPOINT`: Load configuration from this endpoint. `TRAEFIKPROVIDERSHTTPHEADERS<NAME>`: Define custom headers to be sent to the endpoint. `TRAEFIKPROVIDERSHTTP_POLLINTERVAL`: Polling interval for endpoint. (Default: ```5```) `TRAEFIKPROVIDERSHTTP_POLLTIMEOUT`: Polling timeout for endpoint. (Default: ```5```) `TRAEFIKPROVIDERSHTTPTLSCA`: TLS CA `TRAEFIKPROVIDERSHTTPTLSCERT`: TLS cert `TRAEFIKPROVIDERSHTTPTLSINSECURESKIPVERIFY`: TLS insecure skip verify (Default: ```false```) `TRAEFIKPROVIDERSHTTPTLSKEY`: TLS key `TRAEFIKPROVIDERSKUBERNETESCRD`: Enable Kubernetes backend with default settings. (Default: ```false```) `TRAEFIKPROVIDERSKUBERNETESCRD_ALLOWCROSSNAMESPACE`: Allow cross namespace resource reference. (Default: ```false```) `TRAEFIKPROVIDERSKUBERNETESCRD_ALLOWEMPTYSERVICES`: Allow the creation of services without endpoints. (Default: ```false```) `TRAEFIKPROVIDERSKUBERNETESCRD_ALLOWEXTERNALNAMESERVICES`: Allow ExternalName services. (Default: ```false```) `TRAEFIKPROVIDERSKUBERNETESCRD_CERTAUTHFILEPATH`: Kubernetes certificate authority file path (not needed for in-cluster client). `TRAEFIKPROVIDERSKUBERNETESCRD_ENDPOINT`: Kubernetes server endpoint (required for external cluster client). `TRAEFIKPROVIDERSKUBERNETESCRD_INGRESSCLASS`: Value of kubernetes.io/ingress.class annotation to watch for. `TRAEFIKPROVIDERSKUBERNETESCRD_LABELSELECTOR`: Kubernetes label selector to use. `TRAEFIKPROVIDERSKUBERNETESCRD_NAMESPACES`: Kubernetes namespaces. `TRAEFIKPROVIDERSKUBERNETESCRD_THROTTLEDURATION`: Ingress refresh throttle duration (Default: ```0```) `TRAEFIKPROVIDERSKUBERNETESCRD_TOKEN`: Kubernetes bearer token (not needed for in-cluster client). It accepts either a token value or a file path to the token. `TRAEFIKPROVIDERSKUBERNETESGATEWAY`: Enable Kubernetes gateway api provider with default settings. (Default: ```false```) `TRAEFIKPROVIDERSKUBERNETESGATEWAY_CERTAUTHFILEPATH`: Kubernetes certificate authority file path (not needed for in-cluster client). `TRAEFIKPROVIDERSKUBERNETESGATEWAY_ENDPOINT`: Kubernetes server endpoint (required for external cluster client). `TRAEFIKPROVIDERSKUBERNETESGATEWAY_EXPERIMENTALCHANNEL`: Toggles Experimental Channel resources support (TCPRoute, TLSRoute...). (Default: ```false```) `TRAEFIKPROVIDERSKUBERNETESGATEWAY_LABELSELECTOR`: Kubernetes label selector to select specific GatewayClasses. `TRAEFIKPROVIDERSKUBERNETESGATEWAY_NAMESPACES`: Kubernetes namespaces. `TRAEFIKPROVIDERSKUBERNETESGATEWAYSTATUSADDRESSHOSTNAME`: Hostname used for Kubernetes Gateway status address. `TRAEFIKPROVIDERSKUBERNETESGATEWAYSTATUSADDRESSIP`: IP used to set Kubernetes Gateway status address. `TRAEFIKPROVIDERSKUBERNETESGATEWAYSTATUSADDRESSSERVICE`: Published Kubernetes Service to copy status addresses from. `TRAEFIKPROVIDERSKUBERNETESGATEWAYSTATUSADDRESSSERVICE_NAME`: Name of the Kubernetes service. `TRAEFIKPROVIDERSKUBERNETESGATEWAYSTATUSADDRESSSERVICE_NAMESPACE`: Namespace of the Kubernetes service. `TRAEFIKPROVIDERSKUBERNETESGATEWAY_THROTTLEDURATION`: Kubernetes refresh throttle duration (Default: ```0```) `TRAEFIKPROVIDERSKUBERNETESGATEWAY_TOKEN`: Kubernetes bearer token (not needed for in-cluster

It accepts either a token value or a file path to the token. `TRAEFIKPROVIDERSKUBERNETESINGRESS`: Enable Kubernetes backend with default settings. (Default: ```false```) `TRAEFIKPROVIDERSKUBERNETESINGRESS_ALLOWEMPTYSERVICES`: Allow creation of services without endpoints. (Default: ```false```) `TRAEFIKPROVIDERSKUBERNETESINGRESS_ALLOWEXTERNALNAMESERVICES`: Allow ExternalName services. (Default: ```false```) `TRAEFIKPROVIDERSKUBERNETESINGRESS_CERTAUTHFILEPATH`: Kubernetes certificate authority file path (not needed for in-cluster client). `TRAEFIKPROVIDERSKUBERNETESINGRESS_DISABLEINGRESSCLASSLOOKUP`: Disables the lookup of IngressClasses. (Default: ```false```) `TRAEFIKPROVIDERSKUBERNETESINGRESS_ENDPOINT`: Kubernetes server endpoint (required for external cluster client). `TRAEFIKPROVIDERSKUBERNETESINGRESS_INGRESSCLASS`: Value of kubernetes.io/ingress.class annotation or IngressClass name to watch for. `TRAEFIKPROVIDERSKUBERNETESINGRESSINGRESSENDPOINTHOSTNAME`: Hostname used for Kubernetes Ingress endpoints. `TRAEFIKPROVIDERSKUBERNETESINGRESSINGRESSENDPOINTIP`: IP used for Kubernetes Ingress endpoints. `TRAEFIKPROVIDERSKUBERNETESINGRESSINGRESSENDPOINTPUBLISHEDSERVICE`: Published Kubernetes Service to copy status from. `TRAEFIKPROVIDERSKUBERNETESINGRESS_LABELSELECTOR`: Kubernetes Ingress label selector to use. `TRAEFIKPROVIDERSKUBERNETESINGRESS_NAMESPACES`: Kubernetes namespaces. `TRAEFIKPROVIDERSKUBERNETESINGRESS_THROTTLEDURATION`: Ingress refresh throttle duration (Default: ```0```) `TRAEFIKPROVIDERSKUBERNETESINGRESS_TOKEN`: Kubernetes bearer token (not needed for in-cluster client). It accepts either a token value or a file path to the token. `TRAEFIKPROVIDERSNOMAD`: Enable Nomad backend with default settings. (Default: ```false```) `TRAEFIKPROVIDERSNOMAD_ALLOWEMPTYSERVICES`: Allow the creation of services without endpoints. (Default: ```false```) `TRAEFIKPROVIDERSNOMAD_CONSTRAINTS`: Constraints is an expression that Traefik matches against the Nomad service's tags to determine whether to create route(s) for that service. `TRAEFIKPROVIDERSNOMAD_DEFAULTRULE`: Default rule. (Default: ```Host(`{{ normalize .Name }}`)```) `TRAEFIKPROVIDERSNOMADENDPOINTADDRESS`: The address of the Nomad server, including scheme and port. (Default: ```http://127.0.0.1:4646```) `TRAEFIKPROVIDERSNOMADENDPOINTENDPOINTWAITTIME`: WaitTime limits how long a Watch will block. If not provided, the agent default values will be used (Default: ```0```) `TRAEFIKPROVIDERSNOMADENDPOINTREGION`: Nomad region to use. If not provided, the local agent region is used. `TRAEFIKPROVIDERSNOMADENDPOINTTLS_CA`: TLS CA `TRAEFIKPROVIDERSNOMADENDPOINTTLS_CERT`: TLS cert `TRAEFIKPROVIDERSNOMADENDPOINTTLS_INSECURESKIPVERIFY`: TLS insecure skip verify (Default: ```false```) `TRAEFIKPROVIDERSNOMADENDPOINTTLS_KEY`: TLS key `TRAEFIKPROVIDERSNOMADENDPOINTTOKEN`: Token is used to provide a per-request ACL token. `TRAEFIKPROVIDERSNOMAD_EXPOSEDBYDEFAULT`: Expose Nomad services by default. (Default: ```true```) `TRAEFIKPROVIDERSNOMAD_NAMESPACES`: Sets the Nomad namespaces used to discover services. `TRAEFIKPROVIDERSNOMAD_PREFIX`: Prefix for nomad service tags. (Default: ```traefik```) `TRAEFIKPROVIDERSNOMAD_REFRESHINTERVAL`: Interval for polling Nomad API. (Default: ```15```) `TRAEFIKPROVIDERSNOMAD_STALE`: Use stale consistency for catalog reads. (Default: ```false```) `TRAEFIKPROVIDERSPLUGIN_<NAME>`: Plugins configuration. `TRAEFIKPROVIDERSPROVIDERSTHROTTLEDURATION`: Backends throttle duration: minimum duration between 2 events from providers before applying a new configuration. It avoids unnecessary reloads if multiples events are sent in a short amount of time. (Default: ```2```) `TRAEFIKPROVIDERSREDIS`: Enable Redis backend with default settings. (Default: ```false```) `TRAEFIKPROVIDERSREDIS_DB`: Database to be selected after connecting to the server. (Default: ```0```) `TRAEFIKPROVIDERSREDIS_ENDPOINTS`: KV store endpoints. (Default: ```127.0.0.1:6379```) `TRAEFIKPROVIDERSREDIS_PASSWORD`: Password for authentication. `TRAEFIKPROVIDERSREDIS_ROOTKEY`: Root key used for KV store. (Default: ```traefik```) `TRAEFIKPROVIDERSREDISSENTINELLATENCYSTRATEGY`: Defines whether to route commands to the closest master or replica nodes (mutually exclusive with RandomStrategy and ReplicaStrategy). (Default: ```false```) `TRAEFIKPROVIDERSREDISSENTINELMASTERNAME`: Name of the master. `TRAEFIKPROVIDERSREDISSENTINELPASSWORD`: Password for Sentinel authentication. `TRAEFIKPROVIDERSREDISSENTINELRANDOMSTRATEGY`: Defines whether to route commands randomly to master or replica nodes (mutually exclusive with LatencyStrategy and ReplicaStrategy). (Default: ```false```) `TRAEFIKPROVIDERSREDISSENTINELREPLICASTRATEGY`: Defines whether to route all commands to replica nodes (mutually exclusive with LatencyStrategy and RandomStrategy). (Default: ```false```) `TRAEFIKPROVIDERSREDISSENTINELUSEDISCONNECTEDREPLICAS`: Use replicas disconnected with master when cannot get connected replicas. (Default: ```false```) `TRAEFIKPROVIDERSREDISSENTINELUSERNAME`: Username for Sentinel authentication. `TRAEFIKPROVIDERSREDISTLSCA`: TLS CA `TRAEFIKPROVIDERSREDISTLSCERT`: TLS cert `TRAEFIKPROVIDERSREDISTLSINSECURESKIPVERIFY`: TLS insecure skip verify (Default: ```false```) `TRAEFIKPROVIDERSREDISTLSKEY`: TLS key `TRAEFIKPROVIDERSREDIS_USERNAME`: Username for authentication. `TRAEFIKPROVIDERSREST`: Enable Rest backend with default settings. (Default: ```false```) `TRAEFIKPROVIDERSREST_INSECURE`: Activate REST Provider directly on the entryPoint named traefik. (Default: ```false```) `TRAEFIKPROVIDERSSWARM`: Enable Docker Swarm backend with default settings. (Default: ```false```) `TRAEFIKPROVIDERSSWARM_ALLOWEMPTYSERVICES`: Disregards the Docker containers health checks with respect to the creation or removal of the corresponding services. (Default: ```false```) `TRAEFIKPROVIDERSSWARM_CONSTRAINTS`: Constraints is an expression that Traefik matches against the container's labels to determine whether to create any route for that container. `TRAEFIKPROVIDERSSWARM_DEFAULTRULE`: Default rule. (Default: ```Host(`{{ normalize

}}`)```) `TRAEFIKPROVIDERSSWARM_ENDPOINT`: Docker server endpoint. Can be a TCP or a Unix socket endpoint. (Default: ```unix:///var/run/docker.sock```) `TRAEFIKPROVIDERSSWARM_EXPOSEDBYDEFAULT`: Expose containers by default. (Default: ```true```) `TRAEFIKPROVIDERSSWARM_HTTPCLIENTTIMEOUT`: Client timeout for HTTP connections. (Default: ```0```) `TRAEFIKPROVIDERSSWARM_NETWORK`: Default Docker network used. `TRAEFIKPROVIDERSSWARM_REFRESHSECONDS`: Polling interval for swarm mode. (Default: ```15```) `TRAEFIKPROVIDERSSWARMTLSCA`: TLS CA `TRAEFIKPROVIDERSSWARMTLSCERT`: TLS cert `TRAEFIKPROVIDERSSWARMTLSINSECURESKIPVERIFY`: TLS insecure skip verify (Default: ```false```) `TRAEFIKPROVIDERSSWARMTLSKEY`: TLS key `TRAEFIKPROVIDERSSWARM_USEBINDPORTIP`: Use the ip address from the bound port, rather than from the inner network. (Default: ```false```) `TRAEFIKPROVIDERSSWARM_WATCH`: Watch Docker events. (Default: ```true```) `TRAEFIKPROVIDERSZOOKEEPER`: Enable ZooKeeper backend with default settings. (Default: ```false```) `TRAEFIKPROVIDERSZOOKEEPER_ENDPOINTS`: KV store endpoints. (Default: ```127.0.0.1:2181```) `TRAEFIKPROVIDERSZOOKEEPER_PASSWORD`: Password for authentication. `TRAEFIKPROVIDERSZOOKEEPER_ROOTKEY`: Root key used for KV store. (Default: ```traefik```) `TRAEFIKPROVIDERSZOOKEEPER_USERNAME`: Username for authentication. `TRAEFIKSERVERSTRANSPORTFORWARDINGTIMEOUTS_DIALTIMEOUT`: The amount of time to wait until a connection to a backend server can be established. If zero, no timeout exists. (Default: ```30```) `TRAEFIKSERVERSTRANSPORTFORWARDINGTIMEOUTS_IDLECONNTIMEOUT`: The maximum period for which an idle HTTP keep-alive connection will remain open before closing itself (Default: ```90```) `TRAEFIKSERVERSTRANSPORTFORWARDINGTIMEOUTS_RESPONSEHEADERTIMEOUT`: The amount of time to wait for a server's response headers after fully writing the request (including its body, if any). If zero, no timeout exists. (Default: ```0```) `TRAEFIKSERVERSTRANSPORTINSECURESKIPVERIFY`: Disable SSL certificate verification. (Default: ```false```) `TRAEFIKSERVERSTRANSPORTMAXIDLECONNSPERHOST`: If non-zero, controls the maximum idle (keep-alive) to keep per-host. If zero, DefaultMaxIdleConnsPerHost is used (Default: ```200```) `TRAEFIKSERVERSTRANSPORTROOTCAS`: Add cert file for self-signed certificate. `TRAEFIKSERVERSTRANSPORTSPIFFE`: Defines the SPIFFE configuration. (Default: ```false```) `TRAEFIKSERVERSTRANSPORTSPIFFE_IDS`: Defines the allowed SPIFFE IDs (takes precedence over the SPIFFE TrustDomain). `TRAEFIKSERVERSTRANSPORTSPIFFE_TRUSTDOMAIN`: Defines the allowed SPIFFE trust domain. `TRAEFIKSPIFFEWORKLOADAPIADDR`: Defines the workload API address. `TRAEFIKTCPSERVERSTRANSPORTDIALKEEPALIVE`: Defines the interval between keep-alive probes for an active network connection. If zero, keep-alive probes are sent with a default value (currently 15 seconds), if supported by the protocol and operating system. Network protocols or operating systems that do not support keep-alives ignore this field. If negative, keep-alive probes are disabled (Default: ```15```) `TRAEFIKTCPSERVERSTRANSPORTDIALTIMEOUT`: Defines the amount of time to wait until a connection to a backend server can be established. If zero, no timeout exists. (Default: ```30```) `TRAEFIKTCPSERVERSTRANSPORTTERMINATIONDELAY`: Defines the delay to wait before fully terminating the connection, after one connected peer has closed its writing capability. (Default: ```0```) `TRAEFIKTCPSERVERSTRANSPORTTLS`: Defines the TLS configuration. (Default: ```false```) `TRAEFIKTCPSERVERSTRANSPORTTLS_INSECURESKIPVERIFY`: Disables SSL certificate verification. (Default: ```false```) `TRAEFIKTCPSERVERSTRANSPORTTLS_ROOTCAS`: Defines a list of CA secret used to validate self-signed certificate `TRAEFIKTCPSERVERSTRANSPORTTLS_SPIFFE`: Defines the SPIFFE TLS configuration. (Default: ```false```) `TRAEFIKTCPSERVERSTRANSPORTTLSSPIFFEIDS`: Defines the allowed SPIFFE IDs (takes precedence over the SPIFFE TrustDomain). `TRAEFIKTCPSERVERSTRANSPORTTLSSPIFFETRUSTDOMAIN`: Defines the allowed SPIFFE trust domain. `TRAEFIK_TRACING`: OpenTracing configuration. (Default: ```false```) `TRAEFIKTRACINGADDINTERNALS`: Enables tracing for internal services (ping, dashboard, etc...). (Default: ```false```) `TRAEFIKTRACINGCAPTUREDREQUESTHEADERS`: Request headers to add as attributes for server and client spans. `TRAEFIKTRACINGCAPTUREDRESPONSEHEADERS`: Response headers to add as attributes for server and client spans. `TRAEFIKTRACINGGLOBALATTRIBUTES_<NAME>`: Defines additional attributes (key:value) on all spans. `TRAEFIKTRACINGOTLP`: Settings for OpenTelemetry. (Default: ```false```) `TRAEFIKTRACINGOTLPGRPCENDPOINT`: Sets the gRPC endpoint (host:port) of the collector. (Default: ```localhost:4317```) `TRAEFIKTRACINGOTLPGRPCHEADERS_<NAME>`: Headers sent with payload. `TRAEFIKTRACINGOTLPGRPCINSECURE`: Disables client transport security for the exporter. (Default: ```false```) `TRAEFIKTRACINGOTLPGRPCTLS_CA`: TLS CA `TRAEFIKTRACINGOTLPGRPCTLS_CERT`: TLS cert `TRAEFIKTRACINGOTLPGRPCTLS_INSECURESKIPVERIFY`: TLS insecure skip verify (Default: ```false```) `TRAEFIKTRACINGOTLPGRPCTLS_KEY`: TLS key `TRAEFIKTRACINGOTLPHTTPENDPOINT`: Sets the HTTP endpoint (scheme://host:port/path) of the collector. (Default: ```https://localhost:4318```) `TRAEFIKTRACINGOTLPHTTPHEADERS_<NAME>`: Headers sent with payload. `TRAEFIKTRACINGOTLPHTTPTLS_CA`: TLS CA `TRAEFIKTRACINGOTLPHTTPTLS_CERT`: TLS cert `TRAEFIKTRACINGOTLPHTTPTLS_INSECURESKIPVERIFY`: TLS insecure skip verify (Default: ```false```) `TRAEFIKTRACINGOTLPHTTPTLS_KEY`: TLS key `TRAEFIKTRACINGSAMPLERATE`: Sets the rate between 0.0 and 1.0 of requests to trace. (Default: ```1.000000```) `TRAEFIKTRACINGSERVICENAME`: Set the name for this service. (Default: ```traefik```)