# Traefik Dynamic Configuration for External Services
# This file handles routing to services NOT managed by Docker Swarm
http:
  #-----------------------------------------------------------------------------------    
  #                          EXTERNAL SERVICES SECTION
  #-----------------------------------------------------------------------------------     
  services:
    unraid:
      loadBalancer:
        servers:
        - url: "http://10.0.4.10:80"
    # emby:
    #   loadBalancer:
    #     servers:
    #     - url: "http://10.0.4.10:8096"

    #-----------------------------------------------------------------------------------    
    #                          ROUTERS SECTION
    #-----------------------------------------------------------------------------------   
  routers:
    # Local VPN-only services (*.swarm.home)
    unraid-local:
      rule: "Host(`unraid.swarm.home`)"
      entryPoints:
      - web
      - websecure
      service: unraid
      tls: {}
    # emby:
    #   rule: "Host(`movies.swarm.home`)"
    #   entryPoints:
    #   - web
    #   - websecure
    #   service: emby
    #   tls: {}

    #-----------------------------------------------------------------------------------    
    #                          MIDDLEWARES SECTION
    #-----------------------------------------------------------------------------------   
  middlewares:
    authentik:
      forwardAuth:
        address: "http://authentik_server:9000/outpost.goauthentik.io/auth/traefik"
        trustForwardHeader: true
        authResponseHeaders:
        - X-authentik-username
        - X-authentik-groups
        - X-authentik-email
        - X-authentik-name
        - X-authentik-uid