From d7a68237e53645acd31bbd40fc45c464b59ee483 Mon Sep 17 00:00:00 2001
From: mr-forust <vzlomdsisma@gmail.com>
Date: Wed, 4 Feb 2026 22:26:27 +0100
Subject: [PATCH] chore: remove redundant or unnececary traefik labels

- traefik.docker.network= (defined by traefik cli)
- traefik.http.routers.<routername>.middlewares=security-headers@file" (applied globally by traefik cli)
---
 adguardhome/compose.yaml |  4 ----
 authentik/compose.yaml   |  8 +-------
 checkmk/compose.yaml     |  4 ----
 dockmon/compose.yaml     |  4 ----
 downtify/compose.yaml    |  3 ---
 errorpages/compose.yaml  |  2 --
 gitea/compose.yaml       |  4 ----
 glance/compose.yaml      |  5 +----
 headscale/compose.yaml   |  4 ----
 homepages/compose.yaml   |  8 --------
 kener/compose.yaml       |  1 -
 metube/compose.yaml      |  3 ---
 n8n/compose.yaml         | 11 +----------
 netronome/compose.yaml   |  3 ---
 nextcloud/compose.yaml   |  4 ----
 penpot/compose.yaml      |  4 ----
 portainer/compose.yaml   |  4 ----
 termix/compose.yaml      |  4 ----
 traefik/compose.yaml     |  5 +----
 uptime-kuma/compose.yaml |  1 -
 20 files changed, 4 insertions(+), 82 deletions(-)

diff --git a/adguardhome/compose.yaml b/adguardhome/compose.yaml
index 814caee..518847e 100644
--- a/adguardhome/compose.yaml
+++ b/adguardhome/compose.yaml
@@ -16,23 +16,19 @@ services:
       - ./certs:/certs:ro
     labels:
       - "traefik.enable=true"
-      - "traefik.docker.network=proxy"
       - "traefik.http.services.adguard.loadbalancer.server.port=3000"
       
       # Prod Router
       - "traefik.http.routers.adguard.rule=Host(`dns.forust.xyz`) || Host(`adguard.forust.xyz`)"
       - "traefik.http.routers.adguard.entrypoints=websecure"
-      - "traefik.http.routers.adguard.middlewares=security-headers@file"
       - "traefik.http.routers.adguard.tls=true"
       # Local Router
       - "traefik.http.routers.adguard-local.rule=Host(`adguard.workstation.internal`) || Host(`dns.workstation.internal`)"
       - "traefik.http.routers.adguard-local.entrypoints=websecure"
-      - "traefik.http.routers.adguard-local.middlewares=security-headers@file"
       - "traefik.http.routers.adguard-local.tls=true"
       # Dev Router
       - "traefik.http.routers.adguard-dev.rule=Host(`adguard.gigaforust.internal`) || Host(`dns.gigaforust.internal`)"
       - "traefik.http.routers.adguard-dev.entrypoints=websecure"
-      - "traefik.http.routers.adguard-dev.middlewares=security-headers@file"
       - "traefik.http.routers.adguard-dev.tls=true"
       # DoH Router
       - "traefik.http.routers.dns.rule=(Host(`dns.forust.xyz`) && PathPrefix(`/dns-query`))"
diff --git a/authentik/compose.yaml b/authentik/compose.yaml
index ca933cd..88ccc7a 100644
--- a/authentik/compose.yaml
+++ b/authentik/compose.yaml
@@ -42,26 +42,20 @@ services:
       - ./custom-templates:/templates
     labels:
       - "traefik.enable=true"
-      - "traefik.docker.network=proxy"
       - "traefik.http.services.authentik-server.loadbalancer.server.port=9000"
 
       # Prod Router
       - "traefik.http.routers.authentik-server.rule=Host(`auth.forust.xyz`)"
       - "traefik.http.routers.authentik-server.entrypoints=websecure"
-      - "traefik.http.routers.authentik-server.middlewares=security-headers@file"
-      - "traefik.http.routers.authentik-server.service=authentik-server"
       - "traefik.http.routers.authentik-server.tls=true"
       # Local Router
-      - "traefik.http.routers.authentik-server-local.rule=Host(`auth.workstation.internal`) || Host(`auth-dashboard.internal`)"
+      - "traefik.http.routers.authentik-server-local.rule=Host(`auth.workstation.internal`)"
       - "traefik.http.routers.authentik-server-local.entrypoints=websecure"
-      - "traefik.http.routers.authentik-server-local.middlewares=security-headers@file"
-      - "traefik.http.routers.authentik-server-local.service=authentik-server"
       - "traefik.http.routers.authentik-server-local.tls=true"
       # Dev Router
       - "traefik.http.routers.authentik-server-dev.rule=Host(`auth.gigaforust.internal`)"
       - "traefik.http.routers.authentik-server-dev.entrypoints=websecure"
       - "traefik.http.routers.authentik-server-dev.middlewares=security-headers@file"
-      - "traefik.http.routers.authentik-server-dev.service=authentik-server"
       - "traefik.http.routers.authentik-server-dev.tls=true"
     networks:
       - proxy
diff --git a/checkmk/compose.yaml b/checkmk/compose.yaml
index 3b94f16..4fd68e9 100644
--- a/checkmk/compose.yaml
+++ b/checkmk/compose.yaml
@@ -16,22 +16,18 @@ services:
       - TZ=${TZ:-Etc/UTC}
     labels:
       - "traefik.enable=true"
-      - "traefik.docker.network=proxy"
       - "traefik.http.services.checkmk.loadbalancer.server.port=5000"
 
       # Prod Router
       - "traefik.http.routers.checkmk.rule=Host(`cmk.forust.xyz`)"
       - "traefik.http.routers.checkmk.entrypoints=websecure"
-      - "traefik.http.routers.checkmk.middlewares=security-headers@file"
       - "traefik.http.routers.checkmk.tls=true"
       # Local Router
       - "traefik.http.routers.checkmk-local.rule=Host(`cmk.workstation.internal`)"
       - "traefik.http.routers.checkmk-local.entrypoints=websecure"
-      - "traefik.http.routers.checkmk-local.middlewares=security-headers@file"
       - "traefik.http.routers.checkmk-local.tls=true"
       # Dev Router
       - "traefik.http.routers.checkmk-dev.rule=Host(`cmk.gigaforust.internal`)"
-      - "traefik.http.routers.checkmk-dev.middlewares=security-headers@file"
       - "traefik.http.routers.checkmk-dev.entrypoints=websecure"
       - "traefik.http.routers.checkmk-dev.tls=true"
     networks:
diff --git a/dockmon/compose.yaml b/dockmon/compose.yaml
index 243223b..02e9c35 100644
--- a/dockmon/compose.yaml
+++ b/dockmon/compose.yaml
@@ -15,7 +15,6 @@ services:
          retries: 3
       labels:
          - "traefik.enable=true"
-         - "traefik.docker.network=proxy"
          - "traefik.http.services.dockmon.loadbalancer.server.port=443"
          - "traefik.http.services.dockmon.loadbalancer.server.scheme=https"
          - "traefik.http.services.dockmon.loadbalancer.serverstransport=insecureTransport@file"
@@ -24,17 +23,14 @@ services:
          - "traefik.http.routers.dockmon.rule=Host(`dockmon.forust.xyz`)"
          - "traefik.http.routers.dockmon.entrypoints=websecure"
          - "traefik.http.routers.dockmon.middlewares=security-chain@file"
-         - "traefik.http.routers.dockmon.service=dockmon"
          - "traefik.http.routers.dockmon.tls=true"
          # Local Router
          - "traefik.http.routers.dockmon-local.rule=Host(`dockmon.workstation.internal`)"
          - "traefik.http.routers.dockmon-local.entrypoints=websecure"
-         - "traefik.http.routers.dockmon-local.middlewares=security-headers@file"
          - "traefik.http.routers.dockmon-local.tls=true"
          # Dev Router
          - "traefik.http.routers.dockmon-dev.rule=Host(`dockmon.gigaforust.internal`)"
          - "traefik.http.routers.dockmon-dev.entrypoints=websecure"
-         - "traefik.http.routers.dockmon-dev.middlewares=security-chain@file"
          - "traefik.http.routers.dockmon-dev.tls=true"
 
          # Glance Metadata
diff --git a/downtify/compose.yaml b/downtify/compose.yaml
index 3a4053b..070fc99 100644
--- a/downtify/compose.yaml
+++ b/downtify/compose.yaml
@@ -9,7 +9,6 @@ services:
       - ./Downtify_downloads:/downloads
     labels:
       - traefik.enable=true
-      - traefik.docker.network=proxy
       - traefik.http.services.downtify.loadbalancer.server.port=8000
 
       # Prod Router 
@@ -20,12 +19,10 @@ services:
       # Local Router
       - traefik.http.routers.downtify-local.rule=Host(`downtify.workstation.internal`) || Host(`downtify.internal`)
       - traefik.http.routers.downtify-local.entrypoints=websecure
-      - traefik.http.routers.downtify-local.middlewares=security-headers@file
       - traefik.http.routers.downtify-local.tls=true
       # Dev Router
       - traefik.http.routers.downtify-dev.rule=Host(`downtify.gigaforust.internal`)
       - traefik.http.routers.downtify-dev.entrypoints=websecure
-      - traefik.http.routers.downtify-dev.middlewares=security-chain@file
       - traefik.http.routers.downtify-dev.tls=true
     networks:
       - proxy
diff --git a/errorpages/compose.yaml b/errorpages/compose.yaml
index 2171f4d..eaa8328 100644
--- a/errorpages/compose.yaml
+++ b/errorpages/compose.yaml
@@ -9,8 +9,6 @@ services:
       - proxy
     labels:
       - "traefik.enable=true"
-      - "traefik.docker.network=proxy"
-      - "traefik.http.services.errorpage.loadbalancer.server.port=80"
       # Error handler middleware
       - "traefik.http.middlewares.error-pages.errors.status=400-599"
       - "traefik.http.middlewares.error-pages.errors.service=errorpage"
diff --git a/gitea/compose.yaml b/gitea/compose.yaml
index fefac70..459fba8 100644
--- a/gitea/compose.yaml
+++ b/gitea/compose.yaml
@@ -31,23 +31,19 @@ services:
       - /etc/localtime:/etc/localtime:ro
     labels:
       - "traefik.enable=true"
-      - "traefik.docker.network=proxy"
       - "traefik.http.services.gitea.loadbalancer.server.port=3000"
 
       # Prod Router
       - "traefik.http.routers.gitea.rule=Host(`gitea.forust.xyz`)"
       - "traefik.http.routers.gitea.entrypoints=websecure"
-      - "traefik.http.routers.gitea.middlewares=security-headers@file"
       - "traefik.http.routers.gitea.tls=true"
       # Local Router
       - "traefik.http.routers.gitea-local.rule=Host(`gitea.workstation.internal`)"
       - "traefik.http.routers.gitea-local.entrypoints=websecure"
-      - "traefik.http.routers.gitea-local.middlewares=security-headers@file"
       - "traefik.http.routers.gitea-local.tls=true"
       # Dev Router
       - "traefik.http.routers.gitea-dev.rule=Host(`gitea.gigaforust.internal`)"
       - "traefik.http.routers.gitea-dev.entrypoints=websecure"
-      - "traefik.http.routers.gitea-dev.middlewares=security-headers@file"
       - "traefik.http.routers.gitea-dev.tls=true"
       # SSH Router
       - "traefik.tcp.services.gitea.loadbalancer.server.port=22"
diff --git a/glance/compose.yaml b/glance/compose.yaml
index dc1ec97..ebf09b5 100644
--- a/glance/compose.yaml
+++ b/glance/compose.yaml
@@ -12,22 +12,19 @@ services:
     labels:
       - "traefik.enable=true"
       - "traefik.docker.network=proxy"
-      # FIXME: traefik.services.glance.loadbalancer.server.port ??
+      - "traefik.services.glance.loadbalancer.server.port=8080"
 
       # Prod Router
       - "traefik.http.routers.glance.rule=Host(`glance.forust.xyz`)"
       - "traefik.http.routers.glance.entrypoints=websecure"
-      - "traefik.http.routers.glance.middlewares=security-headers@file"
       - "traefik.http.routers.glance.tls=true"
       # Local Router
       - "traefik.http.routers.glance-local.rule=Host(`glance.workstation.internal`)"
       - "traefik.http.routers.glance-local.entrypoints=websecure"
-      - "traefik.http.routers.glance-local.middlewares=security-headers@file"
       - "traefik.http.routers.glance-local.tls=true"
       # Dev Router
       - "traefik.http.routers.glance-dev.rule=Host(`glance.gigaforust.internal`)"
       - "traefik.http.routers.glance-dev.entrypoints=websecure"
-      - "traefik.http.routers.glance-dev.middlewares=security-headers@file"
       - "traefik.http.routers.glance-dev.tls=true"
     networks:
       - proxy
diff --git a/headscale/compose.yaml b/headscale/compose.yaml
index cd1b671..4daa5a5 100644
--- a/headscale/compose.yaml
+++ b/headscale/compose.yaml
@@ -13,7 +13,6 @@ services:
     labels:
       - "me.tale.headplane.target: headscale"
       - "traefik.enable=true"
-      - "traefik.docker.network=proxy"
       - "traefik.http.services.headscale.loadbalancer.server.port=8080"
       - "traefik.http.services.headscale-metrics.loadbalancer.server.port=9090"
 
@@ -68,7 +67,6 @@ services:
     restart: unless-stopped
     labels:
       - "traefik.enable=true"
-      - "treafik.docker.network=proxy"
       - "traefik.http.services.headscale-ui.loadbalancer.server.port=80"
 
       # Prod Router
@@ -79,12 +77,10 @@ services:
       # Local Router
       - "traefik.http.routers.headscale-ui-local.rule=Host(`hs.workstation.internal`) && PathPrefix(`/admin`)"
       - "traefik.http.routers.headscale-ui-local.entrypoints=websecure"
-      - "traefik.http.routers.headscale-ui-local.middlewares=security-chain@file"
       - "traefik.http.routers.headscale-ui-local.tls=true"
       # Dev Router
       - "traefik.http.routers.headscale-ui-dev.rule=Host(`hs.gigaforust.internal`) && PathPrefix(`/admin`)"
       - "traefik.http.routers.headscale-ui-dev.entrypoints=websecure"
-      - "traefik.http.routers.headscale-ui-dev.middlewares=security-chain@file"
       - "traefik.http.routers.headscale-ui-dev.tls=true"
     networks:
       - proxy
diff --git a/homepages/compose.yaml b/homepages/compose.yaml
index 9187c0d..8d22a57 100644
--- a/homepages/compose.yaml
+++ b/homepages/compose.yaml
@@ -12,23 +12,19 @@ services:
       - proxy
     labels:
       - "traefik.enable=true"
-      - "traefik.docker.network=proxy"
       - "traefik.http.services.forust-homepage.loadbalancer.server.port=80"
 
       # Prod Router
       - "traefik.http.routers.forust-homepage.rule=Host(`forust.xyz`)"
       - "traefik.http.routers.forust-homepage.entrypoints=websecure"
-      - "traefik.http.routers.forust-homepage.middlewares=security-headers@file"
       - "traefik.http.routers.forust-homepage.tls=true"
       # Local Router
       - "traefik.http.routers.forust-homepage-local.rule=Host(`landing.workstation.internal`)"
       - "traefik.http.routers.forust-homepage-local.entrypoints=websecure"
-      - "traefik.http.routers.forust-homepage-local.middlewares=security-headers@file"
       - "traefik.http.routers.forust-homepage-local.tls=true"
       # Dev Router
       - "traefik.http.routers.forust-homepage-dev.rule=Host(`landing.gigaforust.internal`)"
       - "traefik.http.routers.forust-homepage-dev.entrypoints=websecure"
-      - "traefik.http.routers.forust-homepage-dev.middlewares=security-headers@file"
       - "traefik.http.routers.forust-homepage-dev.tls=true"
   xdfnx:
     build:
@@ -41,23 +37,19 @@ services:
       - ./xdfnx_files:/usr/share/nginx/html
     labels:
       - "traefik.enable=true"
-      - "traefik.docker.network=proxy"
       - "traefik.http.services.xdfnx-homepage.loadbalancer.server.port=80"
 
       # Prod Router
       - "traefik.http.routers.xdfnx.rule=Host(`xdfnx.cfd`)"
       - "traefik.http.routers.xdfnx.entrypoints=websecure"
-      - "traefik.http.routers.xdfnx.middlewares=security-headers@file"
       - "traefik.http.routers.xdfnx.tls=true"
       # Local Router
       - "traefik.http.routers.xdfnx-local.rule=Host(`xdfnx.workstation.internal`)"
       - "traefik.http.routers.xdfnx-local.entrypoints=websecure"
-      - "traefik.http.routers.xdfnx-local.middlewares=security-headers@file"
       - "traefik.http.routers.xdfnx-local.tls=true"
       # Dev Router
       - "traefik.http.routers.xdfnx-dev.rule=Host(`xdfnx.gigaforust.internal`)"
       - "traefik.http.routers.xdfnx-dev.entrypoints=websecure"
-      - "traefik.http.routers.xdfnx-dev.middlewares=security-headers@file"
       - "traefik.http.routers.xdfnx-dev.tls=true"
     networks:
       - proxy
diff --git a/kener/compose.yaml b/kener/compose.yaml
index 235ba2f..43766fe 100644
--- a/kener/compose.yaml
+++ b/kener/compose.yaml
@@ -14,7 +14,6 @@ services:
       - uploads:/app/uploads
     labels:
       - "traefik.enable=true"
-      - "traefik.docker.network=proxy"
       - "traefik.http.services.kener.loadbalancer.server.port=3000"
 
       # Prod Router
diff --git a/metube/compose.yaml b/metube/compose.yaml
index 133f0e9..742b2cd 100644
--- a/metube/compose.yaml
+++ b/metube/compose.yaml
@@ -14,7 +14,6 @@ services:
       - ./MeTube_downloads:/downloads
     labels:
       - "traefik.enable=true"
-      - "traefik.docker.network=proxy"
       - "traefik.http.services.metube.loadbalancer.server.port=8081"
 
       # Prod Router
@@ -25,12 +24,10 @@ services:
       # Local Router
       - "traefik.http.routers.metube-local.rule=Host(`metube.workstation.internal`)"
       - "traefik.http.routers.metube-local.entrypoints=websecure"
-      - "traefik.http.routers.metube-local.middlewares=security-headers@file"
       - "traefik.http.routers.metube-local.tls=true"
       # Dev Router
       - "traefik.http.routers.metube-dev.rule=Host(`metube.gigaforust.internal`)"
       - "traefik.http.routers.metube-dev.entrypoints=websecure"
-      - "traefik.http.routers.metube-dev.middlewares=security-chain@file"
       - "traefik.http.routers.metube-dev.tls=true"
     networks:
       - proxy
diff --git a/n8n/compose.yaml b/n8n/compose.yaml
index ff73617..340d0b1 100644
--- a/n8n/compose.yaml
+++ b/n8n/compose.yaml
@@ -32,23 +32,14 @@ services:
       # Prod Router
       - "traefik.http.routers.n8n.rule=Host(`n8n.forust.xyz`)"
       - "traefik.http.routers.n8n.entrypoints=websecure"
-      - "traefik.http.routers.n8n.middlewares=security-headers@file"
-      - "traefik.http.routers.n8n.service=n8n"
       - "traefik.http.routers.n8n.tls=true"
-      - "traefik.http.services.n8n.loadbalancer.server.port=5678"
-
       # Local Router
-      - "traefik.http.routers.n8n-local.rule=Host(`n8n.workstation.internal`) || Host(`n8n.internal`)"
+      - "traefik.http.routers.n8n-local.rule=Host(`n8n.workstation.internal`)"
       - "traefik.http.routers.n8n-local.entrypoints=websecure"
-      - "traefik.http.routers.n8n-local.middlewares=security-headers@file"
-      - "traefik.http.routers.n8n-local.service=n8n"
       - "traefik.http.routers.n8n-local.tls=true"
-
       # Dev Router
       - "traefik.http.routers.n8n-dev.rule=Host(`n8n.gigaforust.internal`)"
       - "traefik.http.routers.n8n-dev.entrypoints=websecure"
-      - "traefik.http.routers.n8n-dev.middlewares=security-headers@file"
-      - "traefik.http.routers.n8n-dev.service=n8n"
       - "traefik.http.routers.n8n-dev.tls=true"
 
       - glance.name=n8n
diff --git a/netronome/compose.yaml b/netronome/compose.yaml
index 6c46a36..1650c7b 100644
--- a/netronome/compose.yaml
+++ b/netronome/compose.yaml
@@ -16,17 +16,14 @@ services:
       # Prod Router
       - "traefik.http.routers.netronome.rule=Host(`nm.forust.xyz`)"
       - "traefik.http.routers.netronome.entrypoints=websecure"
-      - "traefik.http.routers.netronome.middlewares=security-headers@file"
       - "traefik.http.routers.netronome.tls=true"
       # Local Router
       - "traefik.http.routers.netronome-local.rule=Host(`nm.workstation.internal`)"
       - "traefik.http.routers.netronome-local.entrypoints=websecure"
-      - "traefik.http.routers.netronome-local.middlewares=security-headers@file"
       - "traefik.http.routers.netronome-local.tls=true"
       # Dev Router
       - "traefik.http.routers.netronome-dev.rule=Host(`nm.gigaforust.internal`)"
       - "traefik.http.routers.netronome-dev.entrypoints=websecure"
-      - "traefik.http.routers.netronome-dev.middlewares=security-headers@file"
       - "traefik.http.routers.netronome-dev.tls=true"
     networks:
       - proxy
diff --git a/nextcloud/compose.yaml b/nextcloud/compose.yaml
index 874bc24..76f9e59 100644
--- a/nextcloud/compose.yaml
+++ b/nextcloud/compose.yaml
@@ -17,7 +17,6 @@ services:
 
     labels:
       - "traefik.enable=true"
-      - "traefik.docker.network=proxy"
       # AIO Services configuration
       - "traefik.http.services.nextcloud-aio.loadbalancer.server.port=8080"
       - "traefik.http.services.nextcloud-aio.loadbalancer.server.scheme=https"
@@ -27,17 +26,14 @@ services:
       # - "traefik.http.routers.nextcloud-aio.rule=Host(`naio.forust.xyz`)"
       # - "traefik.http.routers.nextcloud-aio.entrypoints=websecure"
       # - "traefik.http.routers.nextcloud-aio.middlewares=security-chain@file"
-      # - "traefik.http.routers.nextcloud-aio.service=nextcloud-aio"
       # - "traefik.http.routers.nextcloud-aio.tls=true"
       # Local Router
       - "traefik.http.routers.nextcloud-aio-local.rule=Host(`naio.workstation.internal`)"
       - "traefik.http.routers.nextcloud-aio-local.entrypoints=websecure"
-      - "traefik.http.routers.nextcloud-aio-local.middlewares=security-headers@file"
       - "traefik.http.routers.nextcloud-aio-local.tls=true"
       # Dev Router
       - "traefik.http.routers.nextcloud-aio-dev.rule=Host(`naio.gigaforust.internal`)"
       - "traefik.http.routers.nextcloud-aio-dev.entrypoints=websecure"
-      - "traefik.http.routers.nextcloud-aio-dev.middlewares=security-headers@file"
       - "traefik.http.routers.nextcloud-aio-dev.tls=true"
 
       # Glance Metadata
diff --git a/penpot/compose.yaml b/penpot/compose.yaml
index 9f50231..4f098e7 100644
--- a/penpot/compose.yaml
+++ b/penpot/compose.yaml
@@ -102,23 +102,19 @@ services:
 
     labels:
       - "traefik.enable=true"
-      - "traefik.docker.network=proxy"
       - "traefik.http.services.penpot.loadbalancer.server.port=8080"
 
       # Prod Router
       - "traefik.http.routers.penpot.rule=Host(`penpot.forust.xyz`)"
       - "traefik.http.routers.penpot.entrypoints=websecure"
-      - "traefik.http.routers.penpot.middlewares=security-headers@file"
       - "traefik.http.routers.penpot.tls=true"
       # Local Router
       - "traefik.http.routers.penpot-local.rule=Host(`penpot.workstation.internal`)"
       - "traefik.http.routers.penpot-local.entrypoints=websecure"
-      - "traefik.http.routers.penpot-local.middlewares=security-headers@file"
       - "traefik.http.routers.penpot-local.tls=true"
       # Dev Router
       - "traefik.http.routers.penpot-dev.rule=Host(`penpot.gigaforust.internal`)"
       - "traefik.http.routers.penpot-dev.entrypoints=websecure"
-      - "traefik.http.routers.penpot-dev.middlewares=security-headers@file"
       - "traefik.http.routers.penpot-dev.tls=true"
     environment:
       <<: [ *penpot-flags, *penpot-http-body-size ]
diff --git a/portainer/compose.yaml b/portainer/compose.yaml
index 36423f1..6923c46 100644
--- a/portainer/compose.yaml
+++ b/portainer/compose.yaml
@@ -11,7 +11,6 @@ services:
       # - 8000:8000  # Remove if you do not intend to use Edge Agents
     labels:
       - "traefik.enable=true"
-      - "traefik.docker.network=proxy"
       - "traefik.http.services.portainer.loadbalancer.server.port=9443"
       - "traefik.http.services.portainer.loadbalancer.server.scheme=https"
       - "traefik.http.services.portainer.loadbalancer.serverstransport=insecureTransport@file"
@@ -19,17 +18,14 @@ services:
       # Prod Router
       - "traefik.http.routers.portainer.rule=Host(`portainer.forust.xyz`)"
       - "traefik.http.routers.portainer.entrypoints=websecure"
-      - "traefik.http.routers.portainer.middlewares=security-headers@file"
       - "traefik.http.routers.portainer.tls=true"
       # Local Router
       - "traefik.http.routers.portainer-local.rule=Host(`portainer.workstation.internal`)"
       - "traefik.http.routers.portainer-local.entrypoints=websecure"
-      - "traefik.http.routers.portainer-local.middlewares=security-headers@file"
       - "traefik.http.routers.portainer-local.tls=true"
       # Dev Router
       - "traefik.http.routers.portainer-dev.rule=Host(`portainer.gigaforust.internal`)"
       - "traefik.http.routers.portainer-dev.entrypoints=websecure"
-      - "traefik.http.routers.portainer-dev.middlewares=security-headers@file"
       - "traefik.http.routers.portainer-dev.tls=true"
 
       # Glance Metadata
diff --git a/termix/compose.yaml b/termix/compose.yaml
index f840570..e084f46 100644
--- a/termix/compose.yaml
+++ b/termix/compose.yaml
@@ -11,23 +11,19 @@ services:
       PORT: "8080"
     labels:
       - "traefik.enable=true"
-      - "traefik.docker.network=proxy"
       - "traefik.http.services.termix.loadbalancer.server.port=8080"
 
       # Prod Router
       - "traefik.http.routers.termix.rule=Host(`termix.forust.xyz`)"
       - "traefik.http.routers.termix.entrypoints=websecure"
-      - "traefik.http.routers.termix.middlewares=security-headers@file"
       - "traefik.http.routers.termix.tls=true"
       # Local Router
       - "traefik.http.routers.termix-local.rule=Host(`termix.workstation.internal`)"
       - "traefik.http.routers.termix-local.entrypoints=websecure"
-      - "traefik.http.routers.termix-local.middlewares=security-headers@file"
       - "traefik.http.routers.termix-local.tls=true"
       # Dev Router
       - "traefik.http.routers.termix-dev.rule=Host(`termix.gigaforust.internal`)"
       - "traefik.http.routers.termix-dev.entrypoints=websecure"
-      - "traefik.http.routers.termix-dev.middlewares=security-headers@file"
       - "traefik.http.routers.termix-dev.tls=true"
     networks:
       - proxy
diff --git a/traefik/compose.yaml b/traefik/compose.yaml
index 0bdba9a..5ed7d79 100644
--- a/traefik/compose.yaml
+++ b/traefik/compose.yaml
@@ -17,8 +17,8 @@ services:
 
       # EntryPoints
       - "--entryPoints.web.address=:80"
-      # - "--entryPoints.web.http.middlewares=error-pages@docker"
       - "--entryPoints.web.http.redirections.entryPoint.scheme=https"
+      - "--entryPoints.web.http.redirections.entryPoint.to=websecure"
       - "--entryPoints.websecure.address=:443"
       - "--entryPoints.websecure.http.middlewares=error-pages@docker"
       - "--entryPoints.websecure.http.tls=true"
@@ -43,7 +43,6 @@ services:
       - "--accesslog.filepath=/var/log/traefik/access.log"
     labels:
       - "traefik.enable=true"
-      - "traefik.docker.network=proxy"
 
       # Prod Router (Dash)
       - "traefik.http.routers.traefik-dashboard.rule=Host(`traefik.forust.xyz`)"
@@ -54,13 +53,11 @@ services:
       # Local Router
       - "traefik.http.routers.traefik-dashboard-local.rule=Host(`traefik.workstation.internal`)"
       - "traefik.http.routers.traefik-dashboard-local.entrypoints=websecure"
-      - "traefik.http.routers.traefik-dashboard-local.middlewares=security-headers@file"
       - "traefik.http.routers.traefik-dashboard-local.service=api@internal"
       - "traefik.http.routers.traefik-dashboard-local.tls=true"
       # Dev Router
       - "traefik.http.routers.traefik-dashboard-dev.rule=Host(`traefik.gigaforust.internal`)"
       - "traefik.http.routers.traefik-dashboard-dev.entrypoints=websecure"
-      - "traefik.http.routers.traefik-dashboard-dev.middlewares=security-headers@file"
       - "traefik.http.routers.traefik-dashboard-dev.service=api@internal"
       - "traefik.http.routers.traefik-dashboard-dev.tls=true"
 
diff --git a/uptime-kuma/compose.yaml b/uptime-kuma/compose.yaml
index b950624..683156e 100644
--- a/uptime-kuma/compose.yaml
+++ b/uptime-kuma/compose.yaml
@@ -9,7 +9,6 @@ services:
     #   - "3001:3001"
     labels:
       - "traefik.enable=true"
-      - "traefik.docker.network=proxy"
       - "traefik.http.services.uptime-kuma.loadbalancer.server.port=3001"
 
       # Prod Router