From 2a1ee9968a00b31978e965ef4c006d5079882154 Mon Sep 17 00:00:00 2001
From: Kyattsukuro <nikl.free44@gmail.com>
Date: Thu, 15 Jan 2026 17:28:24 +0100
Subject: [PATCH] migrate to main proxy

---
 compose.yml         |  5 +++--
 config/external.yml | 16 ++++++++++++++++
 traefik.yml         |  5 +++++
 3 files changed, 24 insertions(+), 2 deletions(-)
 create mode 100644 config/external.yml

diff --git a/compose.yml b/compose.yml
index 378b5fb..b2ea101 100644
--- a/compose.yml
+++ b/compose.yml
@@ -10,8 +10,9 @@ services:
     networks:
       - exposed
     ports:
-      - 7080:80
-      - 7443:443
+      - 80:80
+      - 443:443
+      - 2022:2022
     environment:
       - HETZNER_API_TOKEN=${HETZNER_API_TOKEN}
       - DUCKDNS_TOKEN=${DUCKDNS_TOKEN}
diff --git a/config/external.yml b/config/external.yml
new file mode 100644
index 0000000..9382514
--- /dev/null
+++ b/config/external.yml
@@ -0,0 +1,16 @@
+http: 
+  routers:
+    homeassistant:
+      service: homeassistant
+      rule: Host(`home.urmel.de`)
+      entryPoints:
+        - https
+        - http
+      tls: true
+  
+  services:
+    homeassistant: 
+      loadbalancer:
+        servers:
+          - url: "http://172.24.2.4:8123"
+        passHostHeader: true
\ No newline at end of file
diff --git a/traefik.yml b/traefik.yml
index db35d51..2d73ec9 100644
--- a/traefik.yml
+++ b/traefik.yml
@@ -3,6 +3,7 @@ api:
   debug: true
 entryPoints:
   http:
+    asDefault: true
     address: ":80"
     http:
       redirections:
@@ -10,13 +11,17 @@ entryPoints:
           to: https
           scheme: https
   https:
+    asDefault: true
     address: ":443"
+  public_ssh:
+    address: ":2022"
 serversTransport:
   insecureSkipVerify: true
 providers:
   docker:
     endpoint: "unix:///var/run/docker.sock"
     exposedByDefault: false
+    network: traefik_exposed
   file:
     directory: /config
 # https://doc.traefik.io/traefik/reference/install-configuration/tls/certificate-resolvers/acme/