tls:
  certificates:
    - certFile: /certs/shadow.crt
      keyFile: /certs/shadow.key

http:
  routers:
    forgejo:
      rule: Host(`git.xtao.net`)
      entryPoints: [websecure]
      service: forgejo
      tls: {}
    kuma-status:
      rule: Host(`status.xtao.net`) && PathPrefix(`/status`)
      entryPoints: [websecure]
      service: uptime-kuma
      tls: {}
    kuma-status-root:
      rule: Host(`status.xtao.net`) && Path(`/`)
      entryPoints: [websecure]
      middlewares: [status-root-redirect]
      service: noop
      tls: {}
    reject:
      rule: PathPrefix(`/`)
      entryPoints: [websecure]
      priority: 1
      service: reject-sink
      tls: {}
  services:
    forgejo:
      loadBalancer:
        servers:
          - url: http://forgejo:3000
    uptime-kuma:
      loadBalancer:
        servers:
          - url: http://uptime-kuma:3001
    noop:
      loadBalancer:
        servers:
          - url: http://127.0.0.1:9
    reject-sink:
      loadBalancer:
        servers:
          - url: http://127.0.0.1:9
  middlewares:
    status-root-redirect:
      redirectRegex:
        regex: "^https://status\\.xtao\\.net/$"
        replacement: "https://status.xtao.net/status/xtao"
        permanent: true