diff --git a/compose.yml b/compose.yml
index 1720c83..a4be285 100644
--- a/compose.yml
+++ b/compose.yml
@@ -14,27 +14,22 @@ services:
       - 7443:443
     environment:
       - HETZNER_API_TOKEN=${HETZNER_API_TOKEN}
+      - AUTH_STRING=${AUTH_STRING}
     volumes:
       - /etc/localtime:/etc/localtime:ro
       - /var/run/docker.sock:/var/run/docker.sock:ro
       - ${PROJECT_PATH-$PWD}/traefik.yml:/traefik.yml:ro
-      - ${PROJECT_PATH-$PWD}/config.yml:/config.yml:ro
+      - ${PROJECT_PATH-$PWD}/config:/config:ro
       - traefik-certs:/certs
     labels:
       traefik.enable: true
 
-      traefik.http.routers.traefik-secure.entrypoints: https
-      traefik.http.routers.traefik-secure.rule: Host(`traefik.arpa.urmel.de`)
-      traefik.http.routers.traefik-secure.tls: "true"
-      traefik.http.routers.traefik-secure.tls.certresolver: hetzner
-      traefik.http.routers.traefik-secure.service: api@internal
-      traefik.http.routers.traefik-secure.middlewares: traefik-auth@docker
-
-
-      traefik.http.routers.traefik-secure.tls.domains[0].main: "arpa.urmel.de"
-      traefik.http.routers.traefik-secure.tls.domains[0].sans: "*.arpa.urmel.de"
-
-      traefik.http.middlewares.traefik-auth.basicauth.users: "${AUTH_STRING}"
+      traefik.http.routers.traefik-dashboard.entrypoints: https
+      traefik.http.routers.traefik-dashboard.rule: Host(`traefik.arpa.urmel.de`)
+      traefik.http.routers.traefik-dashboard.tls: "true"
+      traefik.http.routers.traefik-dashboard.tls.certresolver: hetzner
+      traefik.http.routers.traefik-dashboard.service: api@internal
+      traefik.http.routers.traefik-dashboard.middlewares: traefik-auth@file
 
 volumes:
   traefik-certs:
diff --git a/config.yml b/config.yml
deleted file mode 100644
index 31946bb..0000000
--- a/config.yml
+++ /dev/null
@@ -1,22 +0,0 @@
-#http:
- #region routers 
-#  routers:
-    #proxmox:
-    #  entryPoints:
-    #    - "https"
-    #  rule: "Host(`proxmox.local.example.com`)"
-    #  middlewares:
-    #    - default-headers
-    #  tls: {}
-    #  service: proxmox
-
-#endregion
-#region services
-  #services:
-  #  proxmox:
-  #    loadBalancer:
-  #      servers:
-  #        - url: "https://192.168.0.100:8006"
-  #      passHostHeader: true
-   
-#endregion
diff --git a/config/config.yml b/config/config.yml
new file mode 100644
index 0000000..2e0445d
--- /dev/null
+++ b/config/config.yml
@@ -0,0 +1,23 @@
+http: 
+  routers:
+    traefik-secure:
+      rule: Host(`urmel.de`)
+      entryPoints:
+        - https
+      tls:
+        domains:
+          - main: "arpa.urmel.de"
+            sans: 
+              - "*.arpa.urmel.de"
+          - main: "urmel.de"
+            sans: 
+              - "*.urmel.de"
+  services:
+    unknown-page:
+      loadbalancer:
+        server:
+          - url: "somedomain.invalide"
+  middlewares:
+    traefik-auth:
+      basicauth:
+        users: '{{ env "AUTH_STRING" }}'
diff --git a/traefik.yml b/traefik.yml
index 78b3fb1..859bbe8 100644
--- a/traefik.yml
+++ b/traefik.yml
@@ -18,7 +18,7 @@ providers:
     endpoint: "unix:///var/run/docker.sock"
     exposedByDefault: false
   file:
-    filename: /config.yml
+    directory: /config
 certificatesResolvers:
   hetzner:
     acme: