---
# Traefik static backend routes for non-containerised lab services
# Managed by homelab-registry-mcp write path
# Source of truth: nodes/heimdall/core/traefik/dynamic/
# Do not edit /mnt/appdata/traefik/dynamic/ directly

http:

  serversTransports:
    insecure-transport:
      insecureSkipVerify: true

  routers:
    tnas-router:
      rule: "Host(`tnas.castaldifamily.com`)"
      entryPoints:
        - websecure
      tls:
        certResolver: cloudflare
      service: tnas-service
      middlewares:
        - security-headers@file
    dsm-router:
      rule: "Host(`dsm.castaldifamily.com`)"
      entryPoints:
        - websecure
      tls:
        certResolver: cloudflare
      service: dsm-service
      middlewares:
        - security-headers@file
    watchtower-router:
      rule: "Host(`watchtower.castaldifamily.com`)"
      entryPoints:
        - websecure
      tls:
        certResolver: cloudflare
      service: watchtower-service
      middlewares:
        - security-headers@file
    gitvana-router:
      rule: "Host(`gitvana.castaldifamily.com`)"
      entryPoints:
        - websecure
      tls:
        certResolver: cloudflare
      service: gitvana-service
      middlewares:
        - security-headers@file
    immich-router:
      rule: "Host(`photos.castaldifamily.com`)"
      entryPoints:
        - websecure
      tls:
        certResolver: cloudflare
      service: immich-service

  services:
    tnas-service:
      loadBalancer:
        servers:
          - url: "https://10.0.0.250:5443/tos/#/"
        serversTransport: insecure-transport
    dsm-service:
      loadBalancer:
        servers:
          - url: "https://10.0.0.249:5001"
        serversTransport: insecure-transport
    watchtower-service:
      loadBalancer:
        servers:
          - url: "https://10.0.0.200:9090"
        serversTransport: insecure-transport
    gitvana-service:
      loadBalancer:
        servers:
          - url: "http://10.0.0.201:3000"
    immich-service:
      loadBalancer:
        servers:
          - url: "http://10.0.0.251:2283"