http:
  routers:
    # Traefik Dashboard
    traefik-dashboard:
      rule: "Host(`traefik.workstation`)"
      entryPoints:
        - websecure
      service: api@internal
      tls: {}

    # Portainer
    portainer:
      rule: "Host(`portainer.workstation`)"
      entryPoints:
        - websecure
      service: portainer
      tls: {}

    # AdGuard Home
    adguard-redirect:
      rule: "Host(`adguard.workstation`)"
      entryPoints:
        - web
      middlewares:
        - redirect-https
      service: adguard

    adguard-secure:
      rule: "Host(`adguard.workstation`)"
      entryPoints:
        - websecure
      service: adguard
      tls: {}

    # Nextcloud AIO Interface
    nextcloud-aio:
      rule: "Host(`nextcloud-aio.workstation`)"
      entryPoints:
        - websecure
      service: nextcloud-aio
      tls: {}

    # Nextcloud Main
    nextcloud:
      rule: "Host(`nextcloud.workstation`)"
      entrypoints:
        - websecure
      service: nextcloud
      middlewares:
        - nextcloud-chain
      tls: {}

    # Dockmon
    dockmon:
      rule: "Host(`dockmon.workstation`)"
      entryPoints:
        - websecure
      service: dockmon
      tls: {}

    # Glance
    glance:
      rule: "Host(`glance.workstation`)"
      entryPoints:
        - websecure
      service: glance
      tls: {}

    # Watercrawl (edu_master)
    watercrawl:
      rule: "Host(`watercrawl.workstation`)"
      entryPoints:
        - websecure
      service: watercrawl
      tls: {}

    # N8N
    n8n:
      rule: "Host(`n8n.workstation`)"
      entryPoints:
        - websecure
      service: n8n
      tls: {}

  services:
    # Portainer
    portainer:
      loadBalancer:
        servers:
          - url: "https://portainer:9443"

    # AdGuard Home
    adguard:
      loadBalancer:
        servers:
          - url: "http://adguardhome:3000"

    # Nextcloud AIO Interface
    nextcloud-aio:
      loadBalancer:
        servers:
          - url: "https://nextcloud-aio-mastercontainer:8080"

    # Nextcloud Main
    nextcloud:
      loadBalancer:
        servers:
          - url: "http://nextcloud-aio-apache:11000"

    # Dockmon
    dockmon:
      loadBalancer:
        servers:
          - url: "https://dockmon:443"

    # Glance
    glance:
      loadBalancer:
        servers:
          - url: "http://glance:8080"

    # Watercrawl
    watercrawl:
      loadBalancer:
        servers:
          - url: "http://nginx:80"

    # N8N
    n8n:
      loadBalancer:
        servers:
          - url: "http://n8n:5678"

  middlewares:
    # HTTPS Redirect
    redirect-https:
      redirectScheme:
        scheme: https
        permanent: true

    # Security Headers
    security-headers:
      headers:
        browserXssFilter: true
        contentTypeNosniff: true
        forceSTSHeader: true
        stsIncludeSubdomains: true
        stsPreload: true
        stsSeconds: 31536000
        customFrameOptionsValue: "SAMEORIGIN"

    nextcloud-secure-headers:
      headers:
        hostsProxyHeaders:
          - "X-Forwarded-Host"
        referrerPolicy: "same-origin"

    nextcloud-chain:
      chain:
        middlewares:
          - redirect-https
          - nextcloud-secure-headers