From 3696bab033cbf6853329a07ae8c248fc606cdeaa Mon Sep 17 00:00:00 2001
From: Nathan <nathanblunkall5@gmail.com>
Date: Sun, 18 Jan 2026 23:16:54 -0600
Subject: [PATCH] try compartmental traefik

---
 system/services/containers/traefik/default.nix | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/system/services/containers/traefik/default.nix b/system/services/containers/traefik/default.nix
index d66f21a..0b48408 100644
--- a/system/services/containers/traefik/default.nix
+++ b/system/services/containers/traefik/default.nix
@@ -135,7 +135,7 @@
                         http = {
                             routers = {
                                 homepageSecure = {
-                                    entryPoints = [ "websecure" ];
+                                    entryPoints = [ "websecure" "localsecure" ];
                                     rule = "Host(`esotericbytes.com`) || Host(`www.esotericbytes.com`)";
                                     service = "homepage";
                                     tls.certResolver = "cloudflare";
@@ -154,14 +154,14 @@
                                     tls.certResolver = "cloudflare";
                                 };
                                 jellyfin = {
-                                    entryPoints = [ "websecure" ];
+                                    entryPoints = [ "websecure" "localsecure" ];
                                     rule = "Host(`jellyfin.esotericbytes.com`)";
                                     service = "jellyfin";
                                     tls.certResolver = "cloudflare";
                                 };
 
                                 auth = {
-                                    entryPoints = [ "websecure" ];
+                                    entryPoints = [ "websecure" "localsecure" ];
                                     rule = "Host(`auth.esotericbytes.com`)";
                                     service = "keycloak";
                                     tls.certResolver = "cloudflare";
@@ -173,13 +173,13 @@
                                     tls.certResolver = "cloudflare";
                                 };*/
                                 gitea = {
-                                    entryPoints = [ "websecure" ];
+                                    entryPoints = [ "websecure" "localsecure" ];
                                     rule = "Host(`gitea.esotericbytes.com`)";
                                     service = "gitea";
                                     tls.certResolver = "cloudflare";
                                 };
                                 nextcloud = {
-                                    entryPoints = [ "websecure" ];
+                                    entryPoints = [ "websecure" "localsecure" ];
                                     rule = "Host(`nextcloud.esotericbytes.com`)";
                                     service = "nextcloud";
                                     tls.certResolver = "cloudflare";
@@ -209,7 +209,7 @@
                                 };
 
                                 netbird = {
-                                    entryPoints = [ "websecure" ];
+                                    entryPoints = [ "websecure" "localsecure" ];
                                     rule = "Host(`vpn.esotericbytes.com`)";
                                     service = "netbird";
                                     tls.certResolver = "cloudflare";