access_control:
  default_policy: one_factor
  # networks:
  # - name: 'internal'
  #   networks:
  #   - '10.0.0.0/8'
  #   - '172.16.0.0/12'
  #   - '192.168.0.0/18'
  rules:
    - domain: traefik.lab.bildme.ru # TODO CHANGE ME!
      policy: one_factor
      subject:
      - ['group:admins']
    - domain: test1.lab.bildme.ru # TODO CHANGE ME!
      policy: two_factor
      subject:
      - ['group:admins']
      # networks:
      # - 'internal'
      # methods:
      # - 'GET'
      # - 'HEAD'