diff --git a/traefik/tls.yaml b/traefik/tls.yaml
index fd7e1a0..2da7935 100644
--- a/traefik/tls.yaml
+++ b/traefik/tls.yaml
@@ -17,12 +17,84 @@ http:
       loadBalancer:
         servers:
           - url: http://192.168.0.10:8123
+    plex:
+      loadBalancer:
+        servers:
+          - url: http://192.168.0.10:32400
+    portainer:
+      loadBalancer:
+        servers:
+          - url: http://192.168.0.10:9000
+    deconz:
+      loadBalancer:
+        servers:
+          - url: http://192.168.0.10:8082
+    proxmox:
+      loadBalancer:
+        servers:
+          - url: http://192.168.0.10:8006
+    nextcloud:
+      loadBalancer:
+        servers:
+          - url: http://192.168.0.10:8083
+      # client_max_body_size 10G
+      # client_body_buffer_size 400M
+      # proxy_hide_header Content-Security-Policy
+      # proxy_hide_header X-Frame-Options
+    keeweb:
+      loadBalancer:
+        servers:
+          - url: http://192.168.0.10:8084
+    grafana:
+      loadBalancer:
+        servers:
+          - url: http://192.168.0.10:3000
 
   routers:
     hass:
       service: hass
       rule: Host(`avagen.{{ env "PRIVATE_DOMAIN" }}`)
-      middleware: redir
+      tls:
+        certResolver: le
+    plex:
+      service: plex
+      rule: Host(`plex.{{ env "PRIVATE_DOMAIN" }}`)
+      tls:
+        certResolver: le
+    portainer:
+      service: portainer
+      rule: Host(`portainer.{{ env "PRIVATE_DOMAIN" }}`)
+      middlewares:
+        - auth
+      tls:
+        certResolver: le
+    deconz:
+      service: deconz
+      rule: Host(`deconz.{{ env "PRIVATE_DOMAIN" }}`)
+      middlewares:
+        - auth
+      tls:
+        certResolver: le
+    proxmox:
+      service: proxmox
+      rule: Host(`proxmox.{{ env "PRIVATE_DOMAIN" }}`)
+      middlewares:
+        - auth
+      tls:
+        certResolver: le
+    cloud:
+      service: nextcloud
+      rule: Host(`cloud.{{ env "PRIVATE_DOMAIN" }}`)
+      tls:
+        certResolver: le
+    pwd:
+      service: keeweb
+      rule: Host(`pwd.{{ env "PRIVATE_DOMAIN" }}`)
+      tls:
+        certResolver: le
+    grafana:
+      service: grafana
+      rule: Host(`grafana.{{ env "PRIVATE_DOMAIN" }}`)
       tls:
         certResolver: le