tcp:
  routers:
    gitea-ssh:
      entryPoints:
        - ssh
      rule: "HostSNI(`*`)"
      service: gitea-ssh

  services:
    gitea-ssh:
      loadBalancer:
        servers:
          - address: "gitea.lab:22"

http:
  routers:
    gitea:
      rule: "Host(`gitea.hemlabb.uk`)"
      entryPoints:
        - websecure
      service: gitea
      tls:
        certResolver: cloudflare

  services:
    gitea:
      loadBalancer:
        servers:
          - url: "http://gitea.lab:3000"

  middlewares:
    redirect-to-https:
      redirectScheme:
        scheme: https
        permanent: true