volumes: 
  - mountPath: /data
    name: traefik-config
    type: configMap

additionalArguments:
  - --providers.file.filename=/data/traefik-config.yaml
  - --entrypoints.websecure.http.tls.certresolver=le 
  - --entrypoints.websecure.http.tls.domains[0].main=xxx
  - --entrypoints.websecure.http.tls.domains[0].sans=*.xxx

  - --certificatesresolvers.le.acme.dnschallenge.provider=azure
  - --certificatesresolvers.le.acme.email=xxxx
  - --certificatesresolvers.le.acme.dnschallenge.resolvers=1.1.1.1
  - --certificatesresolvers.le.acme.storage=/certs/acme.json

  - --certificatesresolvers.le.acme.dnschallenge=true
  - --certificatesresolvers.le.acme.caserver=<https://acme-staging-v02.api.letsencrypt.org/directory>
  - --certificatesresolvers.le.acme.tlschallenge=false

  - --entrypoints.web.address=:80
  - --<http://entrypoints.web.http.redirections.entryPoint.to|entrypoints.web.http.redirections.entryPoint.to>=websecure
  - --entrypoints.web.http.redirections.entryPoint.scheme=https
  - --entrypoints.websecure.address=:443

env: 
  - name: AZURE_CLIENT_ID
    valueFrom:
      secretKeyRef:
        key: client_id
        name: azure-api-credentials
  - name: AZURE_CLIENT_SECRET
    valueFrom:
      secretKeyRef:
        key: client_secret
        name: azure-api-credentials
  - name: AZURE_SUBSCRIPTION_ID
    valueFrom:
      secretKeyRef:
        key: subscription_id
        name: azure-api-credentials
  - name: AZURE_TENANT_ID
    valueFrom:
      secretKeyRef:
        key: tenant_id
        name: azure-api-credentials
  - name: AZURE_RESOURCE_GROUP
    valueFrom:
      secretKeyRef:
        key: resource_group
        name: azure-api-credentials

ports:
  web:
    port: 80
    expose: true
    exposedPort: 80
    protocol: TCP
    nodePort: 32080
  websecure:
    port: 443
    expose: true
    exposedPort: 443
    protocol: TCP
    nodePort: 32443

service:
  enabled: true
  type: NodePort

persistence:
  enabled: true
  path: /certs
  size: 128Mi