[http.middlewares]
  [http.middlewares.lan-only.ipWhiteList]
    sourceRange = ["127.0.0.1/32", "192.168.1.1/24"]
  [http.middlewares.simpleauth.basicAuth]
    usersFile = "/.htpasswd"
  [http.middlewares.authelia.forwardAuth]
    address = "http://authelia:9091/api/verify?rd=https://auth.jafner.net"
    trustForwardHeader = "true"
    authResponseHeaders = ["Remote-User", "Remote-Groups", "Remote-Name", "Remote-Email"]

[http.routers.api]
  rule = "Host(`traefik.jafner.net`)"
  entrypoints = ["websecure"]
  middlewares = ["authelia@file"]
  service = "api@internal"
  [http.routers.api.tls]
    certResolver = "lets-encrypt"