http:
 #region routers 
  routers:
    example:
      entryPoints:
        - "websecure"
      rule: "Host(`example.local.domain.name`)"
      middlewares:
        - default-headers
        - https-redirectscheme
      tls: {}
      service: example
#endregion

#region services
  services:
    example:
      loadBalancer:
        servers:
          - url: "http://ip:port/"
        passHostHeader: true
#endregion

  middlewares:
    https-redirectscheme:
      redirectScheme:
        scheme: https
        permanent: true
    default-headers:
      headers:
        frameDeny: true
        browserXssFilter: true
        contentTypeNosniff: true
        forceSTSHeader: true
        stsIncludeSubdomains: true
        stsPreload: true
        stsSeconds: 15552000
        customFrameOptionsValue: SAMEORIGIN
        customRequestHeaders:
          X-Forwarded-Proto: https

    default-whitelist:
      ipAllowList:
        sourceRange:
        - "127.0.0.1/32"
        - "local ip subnet"

    secured:
      chain:
        middlewares:
        - default-whitelist
        - default-headers