# secure admin resources with basic authentication
[http.middlewares.traefik-auth.basicAuth]
  users = [
    "{{ reverse_proxy_admin_username }}:{{ reverse_proxy_admin_password }}"
  ]

# admin api (dashboard, rest api, ...)
[http.routers.api]
  rule = "Host(`{{ stage_server_name }}.{{ domain }}`)"
  entrypoints = ["admin-traefik"]
  middlewares = ["traefik-auth"]
  service = "api@internal"
  [http.routers.api.tls]
    certResolver = "letsencrypt"

# metrics api (prometheus)
[http.routers.metrics]
  rule = "Host(`{{ stage_server_name }}.{{ domain }}`) && Path(`/metrics`)"
  entrypoints = ["admin-service"]
#  middlewares = ["traefik-auth"]
  service = "prometheus@internal"
  [http.routers.metrics.tls]
    certResolver = "letsencrypt"