http:
  middlewares:
    redirect-to-https:
      redirectScheme:
        scheme: https
        permanent: true

    security-headers:
      headers:
        frameDeny: true
        contentTypeNosniff: true
        browserXssFilter: true
        referrerPolicy: no-referrer-when-downgrade
        stsSeconds: 31536000
        stsIncludeSubdomains: true
        stsPreload: true

    dashboard-basicauth:
      basicAuth:
        users:
          # Provide users via env TRAEFIK_BASIC_AUTH_USERS, format: user:hashedpassword
          # Example to generate: htpasswd -nbB admin 'yourpassword'
          # If env is empty, you can comment this middleware out from labels
          - ${TRAEFIK_BASIC_AUTH_USERS:-}