http:
  middlewares:
    redir:
      redirectScheme:
        scheme: https
        permanent: true
    auth:
      forwardAuth:
        address: http://authelia:9091/api/verify?rd=https://auth.{{ env "PRIVATE_DOMAIN" }}/%23/
        trustForwardHeader: true
        authResponseHeaders:
          - X-Forwarded-User
        insecureSkipVerify: true

  services:
    hass:
      loadBalancer:
        servers:
          - url: http://192.168.0.10:8123

  routers:
    hass:
      service: hass
      rule: Host(`avagen.{{ env "PRIVATE_DOMAIN" }}`)
      middleware: redir
      tls:
        certResolver: le