http:
  serversTransports:
    pvetransport:
      insecureSkipVerify: true

  routers:
    local-traefik-public-https:
      entryPoints:
        - https
      rule: Host(`coco.swarm.local`)
      middlewares:
        - admin-auth@swarm
      tls: {}
      service: coco_desktop@file

    local-proxmox00:
      entryPoints:
        - https
      rule: Host(`dc00.swarm.local`)
      tls: {}
      service: proxmox00@file

    local-proxmox01:
      entryPoints:
        - https
      rule: Host(`dc01.swarm.local`)
      tls: {}
      service: proxmox01@file

    traefik-public-https:
      entryPoints:
        - https
      rule: Host(`coco.furyhawk.lol`)
      middlewares:
        - admin-auth@swarm
      tls:
        certResolver: le
      service: coco_desktop@file

    proxmox00:
      entryPoints:
        - https
      rule: Host(`dc00.furyhawk.lol`)
      middlewares:
        - admin-auth@swarm
      tls: {}
      service: proxmox00@file

    proxmox01:
      entryPoints:
        - https
      rule: Host(`dc01.furyhawk.lol`)
      middlewares:
        - admin-auth@swarm
      tls: {}
      service: proxmox01@file

  services:
    coco_desktop:
      loadBalancer:
        servers:
          - url: "http://192.168.50.178:5000"

    proxmox00:
      loadBalancer:
        passHostHeader: true
        serversTransport: "pvetransport"
        servers:
          - url: "https://192.168.50.210:8006"

    proxmox01:
      loadBalancer:
        passHostHeader: true
        serversTransport: "pvetransport"
        servers:
          - url: "https://192.168.50.201:8006"

tcp:
  routers:
    spice00:
      entryPoints:
        - spice-socket
      rule: HostSNI(`dc00.furyhawk.lol`)
      tls:
        certResolver: le
      service: spice00@file
    spice01:
      entryPoints:
        - spice-socket
      rule: HostSNI(`dc01.furyhawk.lol`)
      tls:
        certResolver: le
      service: spice01@file
    spice0000-tls:
      entryPoints:
        - spice00-tls-socket
      rule: HostSNI(`dc00.furyhawk.lol`)
      tls:
        passthrough: true
      service: spice0000-tls@file
    spice0001-tls:
      entryPoints:
        - spice00-tls-socket
      rule: HostSNI(`dc01.furyhawk.lol`)
      tls:
        passthrough: true
      service: spice0001-tls@file
    spice0100-tls:
      entryPoints:
        - spice01-tls-socket
      rule: HostSNI(`dc00.furyhawk.lol`)
      tls:
        passthrough: true
      service: spice0100-tls@file
    spice0101-tls:
      entryPoints:
        - spice01-tls-socket
      rule: HostSNI(`dc01.furyhawk.lol`)
      tls:
        passthrough: true
      service: spice0101-tls@file

  services:
    spice00:
      loadBalancer:
        servers:
          - address: "192.168.50.210:3128"
    spice01:
      loadBalancer:
        servers:
          - address: "192.168.50.201:3128"
    spice0000-tls:
      loadBalancer:
        servers:
          - address: "192.168.50.210:61000"
    spice0001-tls:
      loadBalancer:
        servers:
          - address: "192.168.50.201:61000"
    spice0100-tls:
      loadBalancer:
        servers:
          - address: "192.168.50.210:61001"
    spice0101-tls:
      loadBalancer:
        servers:
          - address: "192.168.50.201:61001"