http:
  routers:
    cockpit:
      rule: "Host(`{{ vault_domain }}`) && (PathPrefix(`/cockpit/`) || Path(`/cockpit`))"
      entryPoints: https
      middlewares:
        - force-trailing-slash
        - drop-xforwarded-proto
      service: cockpit
      tls:
        certresolver: wildcard

  middlewares:
    cockpit-stripprefix:
      stripPrefix:
        prefixes:
          - "/cockpit"
    drop-xforwarded-proto:
      headers:
        customrequestheaders:
          X-Forwarded-Proto: ""

  services:
    cockpit:
      loadBalancer:
        serversTransport: nocertverify
        servers:
          - url: "https://{{ vault_domain }}:9090"

  serversTransports:
    nocertverify:
      insecureSkipVerify: true