http:
  routers:
    # Traefik Dashboard (dev access. local only)
    traefik-dashboard-dev:
      rule: "Host(`traefik.gigaforust`)"
      entryPoints:
        - websecure
      service: api@internal
      middlewares:
        # - auth
        - security-headers
      tls: {}

    # Nextcloud AIO Interface (dev access. local only)
    nextcloud-aio-dev:
      rule: "Host(`nextcloud-aio.gigaforust`)"
      entryPoints:
        - websecure
      service: nextcloud-aio
      middlewares:
        - security-headers
      tls: {}

    # Termix (dev access, (account required))
    termix-dev:
      rule: "Host(`termix.gigaforust`)"
      entryPoints:
        - websecure
      service: termix
      middlewares:
        - security-headers
      tls: {}

    # MeTube (dev access, (auth required))
    metube-dev:
      rule: "Host(`metube.gigaforust`)"
      entryPoints:
        - websecure
      service: metube
      middlewares:
        - metube-auth
        - security-headers
      tls: {}

    # Portainer (dev acess, (account required))
    portainer-dev:
      rule: "Host(`portainer.gigaforust`)"
      entryPoints:
        - websecure
      service: portainer
      middlewares:
        - security-headers
      tls: {}

    # Uptime Kuma (dev access, (account required))
    uptime-kuma-dev:
      rule: "Host(`uptime.gigaforust`)"
      entryPoints:
        - websecure
      service: uptime-kuma
      tls: {}

    # AdGuard Home (dev access, (account required))
    adguard-dev:
      rule: "Host(`adguard.gigaforust`)"
      entryPoints:
        - websecure
      service: adguard
      middlewares:
        - security-headers
      tls: {}

    # Nextcloud Main (public (account required))
    nextcloud-dev:
      rule: "Host(`nextcloud.gigaforust`)"
      entrypoints:
        - websecure
      service: nextcloud
      middlewares:
        - nextcloud-chain
      tls: {}

    # Dockmon (dev access (account required))
    dockmon-dev:
      rule: "Host(`dockmon.gigaforust`)"
      entryPoints:
        - websecure
      service: dockmon
      middlewares:
        - security-headers
      tls: {}

    # Gitea (dev access (account required))
    gitea-dev:
      rule: "Host(`gitea.gigaforust`)"
      entryPoints:
        - websecure
        - ssh
      service: gitea
      middlewares:
        - security-headers
      tls: {}

    # Glance (dev access, local only)
    glance-dev:
      rule: "Host(`glance.gigaforust`)"
      entryPoints:
        - websecure
      service: glance
      middlewares:
        - security-headers
      tls: {}

    # Watercrawl (dev access, local only)
    watercrawl-dev:
      rule: "Host(`watercrawl.gigaforust`)"
      entryPoints:
        - websecure
      service: watercrawl
      middlewares:
        - security-headers
      tls: {}

    # N8N (local only)
    n8n-dev:
      rule: "Host(`n8n.gigaforust`)"
      entryPoints:
        - websecure
      service: n8n
      middlewares:
        - security-headers
      tls: {}

    # Landing Page (public)
    forust-homepage-dev:
      rule: "Host(`landing.gigaforust`)"
      entryPoints:
        - websecure
      service: forust-homepage
      middlewares:
        - security-headers
      tls: {}

    # Penpot
    penpot-dev:
      rule: "Host(`penpot.gigaforust`)"
      entryPoints:
        - websecure
        - web
      service: penpot
      middlewares:
        - security-headers
      tls: {}