# uplink.tel routing
# Most services now run locally via Docker labels
# This file only contains routes that still need external proxying

http:
  routers:
    # Invidious on uplink.tel still goes to docker-public
    # (local invidious is inv.ghost.tel)
    invidious-uplink:
      entrypoints:
        - https
      rule: "Host(`invidious.uplink.tel`)"
      service: docker-public
      tls:
        certResolver: http

    # Radio (wunder - currently offline)
    radio:
      entrypoints:
        - https
        - http
      rule: "Host(`radio.uplink.tel`)"
      service: radio-wunder
      tls:
        certResolver: http

  services:
    # Proxy to docker-public's traefik (for invidious.uplink.tel)
    docker-public:
      loadBalancer:
        passHostHeader: true
        serversTransport: insecure-transport
        servers:
          - url: "https://192.168.5.46:443"

    # Radio points to wunder (offline)
    radio-wunder:
      loadBalancer:
        passHostHeader: true
        servers:
          - url: "http://100.64.0.8:3000"

  serversTransports:
    insecure-transport:
      insecureSkipVerify: true