[meta] traefik shenanigans

- switch to YAML for the main config
- pin to a version so I don't accidentally screw it up

meta/on-fire-within/main.yml

@@ -69,31 +69,33 @@
     - name: Traefik static configuration
       copy:
         content: |
-          [providers]
+          providers:
-            [providers.docker]
+            docker:
-              exposedByDefault = false
+              exposedByDefault: false
-            [providers.file]
+            file:
-              filename = "/etc/traefik/dynamic_conf.toml"
+              filename: /etc/traefik/dynamic_conf.toml
-              watch = true
+              watch: true
 
-          [entryPoints]
+          entryPoints:
-            [entryPoints.http]
+            http:
-              address = ":80"
+              address: ":80"
 
-            [entryPoints.https]
+            https:
-              address = ":443"
+              address: ":443"
 
-          [certificatesResolvers.le.acme]
+          certificatesResolvers:
-            email = "{{ email }}"
+            le:
-            storage = "/etc/traefik/acme.json"
+              acme:
-            [certificatesResolvers.le.acme.httpChallenge]
+                email: {{ email }}
-              entryPoint = "http"
+                storage: "/etc/traefik/acme.json"
+                httpChallenge:
+                  entryPoint: http
 
-          [api]
+          api:
-            insecure = true
+            insecure: true
 
-          [accessLog]
+          accessLog: {}
-        dest: /etc/traefik/traefik.toml
+        dest: /etc/traefik/traefik.yml
         mode: 0600
 
     # https://docs.syncthing.net/users/faq.html#inotify-limits
@@ -206,7 +208,7 @@
                 - traefik.http.routers.syncthing.tls.certresolver=le
                 - traefik.http.services.syncthing.loadbalancer.server.port=8384
             traefik:
-              image: traefik:latest
+              image: traefik:v2.5
               container_name: traefik
               ports:
                 - 80:80