{ ...
}:

{
  networking.firewall.allowedTCPPorts = [ 80 443 ];

  services.traefik = {
    enable = true;
    dataDir = "/var/lib/traefik";

    staticConfigOptions = {
      global = {
        checkNewVersion = false;
        sendAnonymousUsage = false;
      };
      
      entryPoints = {
        web = {
          address = ":80";
          http.redirections.entrypoint = {
            to = "websecure";
            scheme = "https";
          };
        };
        websecure.address = ":443";
      };

      certificatesResolvers = {
        letsencrypt = {
          acme = {
            email = "finnliry+acme-cl-00-00@gmail.com";
            storage = "/var/lib/traefik/acme.json";
            httpChallenge = { entryPoint = "web"; };
          };
        };
      };
    };
  };
}