http:
  routers:
    # Nitter - Twitter frontend
    nitter:
      entrypoints:
        - https
      rule: "Host(`nitter.uplink.tel`)"
      service: docker-public
      tls:
        certResolver: http

    # Invidious - YouTube frontend
    invidious-uplink:
      entrypoints:
        - https
      rule: "Host(`invidious.uplink.tel`)"
      service: docker-public
      tls:
        certResolver: http

    # SearXNG - Search engine
    searx:
      entrypoints:
        - https
      rule: "Host(`searx.uplink.tel`)"
      service: docker-public
      tls:
        certResolver: http

    # FreshRSS - RSS reader
    freshrss:
      entrypoints:
        - https
      rule: "Host(`freshrss.uplink.tel`)"
      service: docker-public
      tls:
        certResolver: http

    # RSSHub
    rsshub:
      entrypoints:
        - https
      rule: "Host(`rsshub.uplink.tel`)"
      service: docker-public
      tls:
        certResolver: http

    # Radio (wunder - currently offline)
    radio:
      entrypoints:
        - https
      rule: "Host(`radio.uplink.tel`)"
      service: radio-wunder
      tls:
        certResolver: http

  services:
    # Proxy to docker-public's traefik (HTTPS)
    docker-public:
      loadBalancer:
        passHostHeader: true
        serversTransport: insecure-transport
        servers:
          - url: "https://192.168.5.46:443"

    # Radio points to wunder (offline)
    radio-wunder:
      loadBalancer:
        passHostHeader: true
        servers:
          - url: "http://100.64.0.8:3000"

  serversTransports:
    insecure-transport:
      insecureSkipVerify: true