diff --git a/stacks/traefik/docker-compose.yml b/stacks/traefik/docker-compose.yml
index ce26829..21d6cbe 100644
--- a/stacks/traefik/docker-compose.yml
+++ b/stacks/traefik/docker-compose.yml
@@ -52,9 +52,14 @@ services:
       - "traefik.http.routers.skeyta.tls.certresolver=http"
       - "traefik.http.routers.radio.entrypoints=http,https"
       - "traefik.http.routers.radio.rule=Host(`radio.uplink.tel`)"
-      - "traefik.http.routers.radio.service=radio"
+      - "traefik.http.routers.radio.service=radio-wunder"
       - "traefik.http.routers.radio.middlewares=securityHeaders@docker"
       - "traefik.http.routers.radio.tls.certresolver=http"
+      - "traefik.http.routers.sdr.entrypoints=http,https"
+      - "traefik.http.routers.sdr.rule=Host(`sdr.uplink.tel`)"
+      - "traefik.http.routers.sdr.service=sdr"
+      - "traefik.http.routers.sdr.middlewares=redirect-to-https"
+      - "traefik.http.routers.sdr.tls.certresolver=http"
       - "traefik.http.routers.spider.entrypoints=http,https"
       - "traefik.http.routers.spider.rule=Host(`spider.ghost.tel`)"
       - "traefik.http.routers.spider.service=spider"
@@ -93,8 +98,10 @@ services:
       - "traefik.http.services.meshmon.loadbalancer.passHostHeader=true"
       - "traefik.http.services.skeyta.loadbalancer.server.url=http://ramiel.localdomain:8"
       - "traefik.http.services.skeyta.loadbalancer.passHostHeader=true"
-      - "traefik.http.services.radio.loadbalancer.server.url=http://100.64.0.8:3000"
-      - "traefik.http.services.radio.loadbalancer.passHostHeader=true"
+      - "traefik.http.services.radio-wunder.loadbalancer.server.url=http://wunder.localdomain:3000"
+      - "traefik.http.services.sdr.loadbalancer.server.url=http://wunder.localdomain:8073"
+      - "traefik.http.services.sdr.loadbalancer.passHostHeader=true"
+      - "traefik.http.services.radio-wunder.loadbalancer.passHostHeader=true"
       - "traefik.http.services.spider.loadbalancer.server.url=http://melchior.localdomain:30870"
       - "traefik.http.services.spider.loadbalancer.passHostHeader=true"
       - "traefik.http.services.tlc.loadbalancer.server.url=http://docker-dev:8080/"
@@ -111,6 +118,7 @@ services:
       - "traefik.http.middlewares.redirect-immich-to-photos.redirectregex.replacement=https://photos.ghost.tel$1"
       - "traefik.http.middlewares.redirect-immich-to-photos.redirectregex.permanent=true"
       - "traefik.http.middlewares.dashboard-auth.basicauth.usersfile=/basicAuth"
+      - "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
       - "traefik.http.middlewares.auth.forwardauth.address=http://authentik-server:9000/outpost.goauthentik.io/auth/traefik"
       - "traefik.http.middlewares.auth.forwardauth.trustForwardHeader=true"
       - "traefik.http.middlewares.auth.forwardauth.authResponseHeaders=X-authentik-username,X-authentik-groups,X-authentik-email,X-authentik-name,X-authentik-uid,X-authentik-jwt,X-authentik-meta-jwks,X-authentik-meta-outpost,X-authentik-meta-provider,X-authentik-meta-app,X-authentik-meta-version"