From c09ae6a6f0a20e0689f90fb297466539c8c352fc Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 24 Feb 2026 19:41:29 +0000
Subject: [PATCH 1/5] Initial plan


From c490302947b7fe21b3086bb2aae128b74e070887 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 24 Feb 2026 19:44:20 +0000
Subject: [PATCH 2/5] Configure Traefik to use wildcard Let's Encrypt
 certificates

Co-authored-by: kylegordon <231528+kylegordon@users.noreply.github.com>
---
 double-take/docker-compose.yaml      | 1 -
 scrutiny/docker-compose.yaml         | 1 -
 traefik/docker-compose-deepcore.yaml | 9 +++++++++
 traefik/docker-compose.yaml          | 9 +++++++++
 4 files changed, 18 insertions(+), 2 deletions(-)

diff --git a/double-take/docker-compose.yaml b/double-take/docker-compose.yaml
index 073233a1..f5804285 100644
--- a/double-take/docker-compose.yaml
+++ b/double-take/docker-compose.yaml
@@ -37,7 +37,6 @@ services:
       - traefik.http.routers.double-take.entrypoints=websecure
       - traefik.http.routers.double-take.tls=true
       - traefik.http.routers.double-take.tls.certresolver=letsencrypt
-      - traefik.http.routers.double-take.tls.domains=double-take.viewpoint.house
       - traefik.http.services.double-take.loadbalancer.server.port=3000
       - traefik.http.services.double-take.loadbalancer.healthcheck.path=/
       - traefik.http.services.double-take.loadbalancer.healthcheck.port=3000
diff --git a/scrutiny/docker-compose.yaml b/scrutiny/docker-compose.yaml
index f7da4025..1d6d2871 100644
--- a/scrutiny/docker-compose.yaml
+++ b/scrutiny/docker-compose.yaml
@@ -55,7 +55,6 @@ services:
       - traefik.http.routers.scrutiny-web.entrypoints=websecure
       - traefik.http.routers.scrutiny-web.tls=true
       - traefik.http.routers.scrutiny-web.tls.certresolver=letsencrypt
-      - traefik.http.routers.scrutiny-web.tls.domains=scrutiny.viewpoint.house
       - traefik.http.services.scrutiny-web.loadbalancer.server.port=8080
       - traefik.http.services.scrutiny-web.loadbalancer.healthcheck.path=/api/health
       - traefik.http.services.scrutiny-web.loadbalancer.healthcheck.port=8080
diff --git a/traefik/docker-compose-deepcore.yaml b/traefik/docker-compose-deepcore.yaml
index bf80b308..bcb0d3de 100644
--- a/traefik/docker-compose-deepcore.yaml
+++ b/traefik/docker-compose-deepcore.yaml
@@ -31,6 +31,15 @@ services:
       - --certificatesresolvers.letsencrypt.acme.dnschallenge.provider=route53
       - --certificatesresolvers.letsencrypt.acme.email=${LETSENCRYPT_EMAIL}
       - --certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json
+    labels:
+      # Configure wildcard certificates for viewpoint.house domain
+      - "traefik.http.routers.wildcard-viewpoint.tls.certresolver=letsencrypt"
+      - "traefik.http.routers.wildcard-viewpoint.tls.domains[0].main=viewpoint.house"
+      - "traefik.http.routers.wildcard-viewpoint.tls.domains[0].sans=*.viewpoint.house"
+      # Configure wildcard certificates for glasgownet.com domain
+      - "traefik.http.routers.wildcard-glasgownet.tls.certresolver=letsencrypt"
+      - "traefik.http.routers.wildcard-glasgownet.tls.domains[1].main=glasgownet.com"
+      - "traefik.http.routers.wildcard-glasgownet.tls.domains[1].sans=*.glasgownet.com"
     ports:
       - "80:80"     # Web entrypoint
       - "443:443" # Websecure entrypoint
diff --git a/traefik/docker-compose.yaml b/traefik/docker-compose.yaml
index 14753081..bd92d501 100644
--- a/traefik/docker-compose.yaml
+++ b/traefik/docker-compose.yaml
@@ -48,6 +48,15 @@ services:
       - --certificatesresolvers.letsencrypt.acme.dnschallenge.provider=route53
       - --certificatesresolvers.letsencrypt.acme.email=${LETSENCRYPT_EMAIL}
       - --certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json
+    labels:
+      # Configure wildcard certificates for viewpoint.house domain
+      - "traefik.http.routers.wildcard-viewpoint.tls.certresolver=letsencrypt"
+      - "traefik.http.routers.wildcard-viewpoint.tls.domains[0].main=viewpoint.house"
+      - "traefik.http.routers.wildcard-viewpoint.tls.domains[0].sans=*.viewpoint.house"
+      # Configure wildcard certificates for glasgownet.com domain
+      - "traefik.http.routers.wildcard-glasgownet.tls.certresolver=letsencrypt"
+      - "traefik.http.routers.wildcard-glasgownet.tls.domains[1].main=glasgownet.com"
+      - "traefik.http.routers.wildcard-glasgownet.tls.domains[1].sans=*.glasgownet.com"
     ports:
       - "80:80"     # Web entrypoint
       - "443:443" # Websecure entrypoint

From 8a986984746de1b7b1b347d88c6bd64db3fa7568 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 24 Feb 2026 19:45:53 +0000
Subject: [PATCH 3/5] Fix domain array indices for wildcard certificates and
 add documentation

Co-authored-by: kylegordon <231528+kylegordon@users.noreply.github.com>
---
 traefik/docker-compose-deepcore.yaml | 4 ++--
 traefik/docker-compose.yaml          | 4 ++--
 traefik/traefik.env.example          | 7 +++++++
 3 files changed, 11 insertions(+), 4 deletions(-)

diff --git a/traefik/docker-compose-deepcore.yaml b/traefik/docker-compose-deepcore.yaml
index bcb0d3de..87a12843 100644
--- a/traefik/docker-compose-deepcore.yaml
+++ b/traefik/docker-compose-deepcore.yaml
@@ -38,8 +38,8 @@ services:
       - "traefik.http.routers.wildcard-viewpoint.tls.domains[0].sans=*.viewpoint.house"
       # Configure wildcard certificates for glasgownet.com domain
       - "traefik.http.routers.wildcard-glasgownet.tls.certresolver=letsencrypt"
-      - "traefik.http.routers.wildcard-glasgownet.tls.domains[1].main=glasgownet.com"
-      - "traefik.http.routers.wildcard-glasgownet.tls.domains[1].sans=*.glasgownet.com"
+      - "traefik.http.routers.wildcard-glasgownet.tls.domains[0].main=glasgownet.com"
+      - "traefik.http.routers.wildcard-glasgownet.tls.domains[0].sans=*.glasgownet.com"
     ports:
       - "80:80"     # Web entrypoint
       - "443:443" # Websecure entrypoint
diff --git a/traefik/docker-compose.yaml b/traefik/docker-compose.yaml
index bd92d501..19e26ce8 100644
--- a/traefik/docker-compose.yaml
+++ b/traefik/docker-compose.yaml
@@ -55,8 +55,8 @@ services:
       - "traefik.http.routers.wildcard-viewpoint.tls.domains[0].sans=*.viewpoint.house"
       # Configure wildcard certificates for glasgownet.com domain
       - "traefik.http.routers.wildcard-glasgownet.tls.certresolver=letsencrypt"
-      - "traefik.http.routers.wildcard-glasgownet.tls.domains[1].main=glasgownet.com"
-      - "traefik.http.routers.wildcard-glasgownet.tls.domains[1].sans=*.glasgownet.com"
+      - "traefik.http.routers.wildcard-glasgownet.tls.domains[0].main=glasgownet.com"
+      - "traefik.http.routers.wildcard-glasgownet.tls.domains[0].sans=*.glasgownet.com"
     ports:
       - "80:80"     # Web entrypoint
       - "443:443" # Websecure entrypoint
diff --git a/traefik/traefik.env.example b/traefik/traefik.env.example
index c2a3de74..cc0d5c29 100644
--- a/traefik/traefik.env.example
+++ b/traefik/traefik.env.example
@@ -15,6 +15,13 @@ AWS_HOSTED_ZONE_ID=YOUR_HOSTED_ZONE_ID
 DOMAIN=your-domain.com
 CERT_RESOLVER=letsencrypt
 
+# Wildcard Certificate Configuration
+# Traefik is configured to request wildcard certificates for *.viewpoint.house
+# and *.glasgownet.com domains. This reduces Let's Encrypt API load by using
+# a single certificate for all subdomains instead of individual certificates
+# per service. The wildcard certificate configuration is defined in the
+# Traefik service labels in docker-compose.yaml files.
+
 # Optional Traefik debugging (uncomment to enable)
 #TRAEFIK_ACCESS_LOGS_ENABLED=true
 #TRAEFIK_ACCESS_LOG_ENABLED=true

From e7a80729000d43ac591719a1cbc78343ba8de901 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 24 Feb 2026 20:04:34 +0000
Subject: [PATCH 4/5] Remove individual certificate resolvers from all services
 to use wildcard certificates

Co-authored-by: kylegordon <231528+kylegordon@users.noreply.github.com>
---
 actual_server/docker-compose.yaml    | 2 --
 beszel/docker-compose.yaml           | 2 --
 calibre/docker-compose.yaml          | 4 ----
 core-stack/docker-compose.yaml       | 2 --
 double-take/docker-compose.yaml      | 1 -
 elk-stack/docker-compose.yaml        | 3 ---
 eplzones/docker-compose.yaml         | 2 --
 esphome/docker-compose.yaml          | 2 --
 fr24feed/docker-compose.yaml         | 1 -
 frigate/docker-compose.yaml          | 2 --
 givtcp/docker-compose.yaml           | 2 --
 grafana/docker-compose.yaml          | 2 --
 graphs1090/docker-compose.yaml       | 1 -
 ha-stack/docker-compose.yaml         | 2 --
 homebox/docker-compose.yaml          | 2 --
 homepage/docker-compose.yaml         | 2 --
 hydra/docker-compose.yaml            | 2 --
 influxdb/docker-compose.yaml         | 2 --
 jellyfin/docker-compose.yaml         | 2 --
 karakeep/docker-compose.yaml         | 2 --
 miniflux/docker-compose.yaml         | 2 --
 monitoring-stack/docker-compose.yaml | 6 ------
 music-assistant/docker-compose.yaml  | 2 --
 nginx_core/docker-compose.yaml       | 2 --
 node-red/docker-compose.yaml         | 2 --
 nzbget/docker-compose.yaml           | 2 --
 ollama/docker-compose.yaml           | 2 --
 paperless/docker-compose.yaml        | 2 --
 peanut/docker-compose.yaml           | 2 --
 photoprism/docker-compose.yaml       | 2 --
 phpmyadmin/docker-compose.yaml       | 2 --
 piaware/docker-compose.yaml          | 1 -
 pihole/docker-compose.yaml           | 2 --
 planefinder/docker-compose.yaml      | 1 -
 predbat/docker-compose.yaml          | 2 --
 radarr/docker-compose.yaml           | 2 --
 rss/docker-compose.yaml              | 2 --
 scrutiny/docker-compose.yaml         | 1 -
 social-stack/docker-compose.yaml     | 2 --
 sonarr/docker-compose.yaml           | 2 --
 tdarr/docker-compose.yaml            | 2 --
 traefik/docker-compose-deepcore.yaml | 8 ++++++++
 traefik/docker-compose.yaml          | 8 ++++++++
 unifi/docker-compose.yaml            | 2 --
 uptime-kuma/docker-compose.yaml      | 2 --
 wallabag/docker-compose.yaml         | 2 --
 warpgate/docker-compose.yaml         | 2 --
 whatsupdocker/docker-compose.yaml    | 2 --
 zigbee2mqtt/docker-compose.yaml      | 2 --
 49 files changed, 16 insertions(+), 95 deletions(-)

diff --git a/actual_server/docker-compose.yaml b/actual_server/docker-compose.yaml
index a3703431..bf0bf1be 100644
--- a/actual_server/docker-compose.yaml
+++ b/actual_server/docker-compose.yaml
@@ -43,8 +43,6 @@ services:
       - traefik.http.routers.actual.rule=Host(`actual.viewpoint.house`)
       - traefik.http.routers.actual.entrypoints=websecure
       - traefik.http.routers.actual.tls=true
-      - traefik.http.routers.actual.tls.certresolver=letsencrypt
-      - traefik.http.routers.actual.tls.domains[0].main=actual.viewpoint.house
       - com.centurylinklabs.watchtower.enable=true
       - homepage.group=Admin
       - homepage.icon=mdi-cloud-upload-outline
diff --git a/beszel/docker-compose.yaml b/beszel/docker-compose.yaml
index fa3335c4..6bb9287c 100644
--- a/beszel/docker-compose.yaml
+++ b/beszel/docker-compose.yaml
@@ -31,8 +31,6 @@ services:
       - traefik.http.routers.beszel.rule=Host(`beszel.viewpoint.house`)
       - traefik.http.routers.beszel.entrypoints=websecure
       - traefik.http.routers.beszel.tls=true
-      - traefik.http.routers.beszel.tls.certresolver=letsencrypt
-      - traefik.http.routers.beszel.tls.domains[0].main=beszel.viewpoint.house
       - traefik.http.services.beszel.loadbalancer.server.port=8090
       - traefik.http.services.beszel.loadbalancer.healthcheck.port=8090
       - homepage.group=Monitoring
diff --git a/calibre/docker-compose.yaml b/calibre/docker-compose.yaml
index 7eea7bf8..dfb37a17 100644
--- a/calibre/docker-compose.yaml
+++ b/calibre/docker-compose.yaml
@@ -60,15 +60,11 @@ services:
       - traefik.http.routers.calibre.entrypoints=websecure
       - traefik.http.routers.calibre.service=calibre
       - traefik.http.routers.calibre.tls=true
-      - traefik.http.routers.calibre.tls.certresolver=letsencrypt
-      - traefik.http.routers.calibre.tls.domains[0].main=calibre.viewpoint.house
       - traefik.http.services.calibre.loadbalancer.server.port=8080
       - traefik.http.services.calibre.loadbalancer.healthcheck.port=8080
       - traefik.http.services.calibre.loadbalancer.healthcheck.path=/
 
       - traefik.http.routers.calibre-web-https.tls=true
-      - traefik.http.routers.calibre-web-https.tls.certresolver=letsencrypt
-      - traefik.http.routers.calibre-web-https.tls.domains[0].main=calibre-web.viewpoint.house
       - traefik.http.routers.calibre-web-https.rule=Host(`calibre-web.viewpoint.house`)
       - traefik.http.routers.calibre-web-https.entrypoints=websecure
       - traefik.http.routers.calibre-web-https.service=calibre-web-https
diff --git a/core-stack/docker-compose.yaml b/core-stack/docker-compose.yaml
index c1b5d86b..f5760131 100644
--- a/core-stack/docker-compose.yaml
+++ b/core-stack/docker-compose.yaml
@@ -115,7 +115,6 @@ services:
   #     - 'traefik.http.routers.netbootxyz.rule=Host(`netboot.viewpoint.house`)'
   #     - 'traefik.http.routers.netbootxyz.entrypoints=websecure'
   #     - 'traefik.http.routers.netbootxyz.tls=true'
-  #     - 'traefik.http.routers.netbootxyz.tls.certresolver=letsencrypt'
   #     - 'traefik.http.routers.netbootxyz.service=netbootxyz'
   #     - 'traefik.http.services.netbootxyz.loadbalancer.server.port=80'
 
@@ -154,7 +153,6 @@ services:
   #       - 'traefik.http.routers.authelia.rule=Host(`auth.viewpoint.house`)'
   #       - 'traefik.http.routers.authelia.entrypoints=websecure'
   #       - 'traefik.http.routers.authelia.tls=true'
-  #       - 'traefik.http.routers.authelia.tls.certresolver=letsencrypt'
   #       # - 'traefik.http.middlewares.authelia.forwardauth.address=http://authelia:9091/api/authz/forward-auth?authelia_url=https://auth.viewpoint.house'  # yamllint disable-line rule:line-length
   #       # - 'traefik.http.middlewares.authelia.forwardauth.trustForwardHeader=true'
   #       # - 'traefik.http.middlewares.authelia.forwardauth.authResponseHeaders=Remote-User,Remote-Groups,Remote-Name,Remote-Email'  # yamllint disable-line rule:line-length
diff --git a/double-take/docker-compose.yaml b/double-take/docker-compose.yaml
index f5804285..a7e61c9f 100644
--- a/double-take/docker-compose.yaml
+++ b/double-take/docker-compose.yaml
@@ -36,7 +36,6 @@ services:
       - traefik.http.routers.double-take.rule=Host(`double-take.viewpoint.house`)
       - traefik.http.routers.double-take.entrypoints=websecure
       - traefik.http.routers.double-take.tls=true
-      - traefik.http.routers.double-take.tls.certresolver=letsencrypt
       - traefik.http.services.double-take.loadbalancer.server.port=3000
       - traefik.http.services.double-take.loadbalancer.healthcheck.path=/
       - traefik.http.services.double-take.loadbalancer.healthcheck.port=3000
diff --git a/elk-stack/docker-compose.yaml b/elk-stack/docker-compose.yaml
index 392e211b..b2428f13 100644
--- a/elk-stack/docker-compose.yaml
+++ b/elk-stack/docker-compose.yaml
@@ -54,7 +54,6 @@ services:
       - traefik.http.routers.cerebro.rule=Host(`cerebro.viewpoint.house`)
       - traefik.http.routers.cerebro.entrypoints=websecure
       - traefik.http.routers.cerebro.tls=true
-      - traefik.http.routers.cerebro.tls.certresolver=letsencrypt
       - homepage.group=Monitoring
       - homepage.name=Cerebro
       - homepage.icon=mdi-chip
@@ -76,7 +75,6 @@ services:
       - traefik.http.routers.elastichq.rule=Host(`elastichq.viewpoint.house`)
       - traefik.http.routers.elastichq.entrypoints=websecure
       - traefik.http.routers.elastichq.tls=true
-      - traefik.http.routers.elastichq.tls.certresolver=letsencrypt
       - homepage.group=Monitoring
       - homepage.name=ElasticHQ
       - homepage.icon=mdi-chip
@@ -318,7 +316,6 @@ services:
       - traefik.http.routers.kibana01.rule=Host(`logs.viewpoint.house`)
       - traefik.http.routers.kibana01.entrypoints=websecure
       - traefik.http.routers.kibana01.tls=true
-      - traefik.http.routers.kibana01.tls.certresolver=letsencrypt
       - traefik.http.services.kibana01.loadbalancer.server.port=5601
       - traefik.http.services.kibana01.loadbalancer.healthcheck.path=/
       - traefik.http.services.kibana01.loadbalancer.healthcheck.port=5601
diff --git a/eplzones/docker-compose.yaml b/eplzones/docker-compose.yaml
index a384f21e..4a5603ce 100644
--- a/eplzones/docker-compose.yaml
+++ b/eplzones/docker-compose.yaml
@@ -37,8 +37,6 @@ services:
       - traefik.docker.network=traefik_traefik_proxy
       - traefik.http.routers.EPLZones.rule=Host(`eplzones.viewpoint.house`)
       - traefik.http.routers.EPLZones.entrypoints=websecure
-      - traefik.http.routers.EPLZones.tls.certresolver=letsencrypt
-      - traefik.http.routers.EPLZones.tls.domains[0].main=eplzones.viewpoint.house
       - traefik.http.services.EPLZones.loadbalancer.server.port=42069
       - traefik.http.services.EPLZones.loadbalancer.healthcheck.path=/
       - traefik.http.services.EPLZones.loadbalancer.healthcheck.port=42069
diff --git a/esphome/docker-compose.yaml b/esphome/docker-compose.yaml
index 8a03cb10..1fcee917 100644
--- a/esphome/docker-compose.yaml
+++ b/esphome/docker-compose.yaml
@@ -31,8 +31,6 @@ services:
       - traefik.http.routers.esphome.rule=Host(`esphome.viewpoint.house`)
       - traefik.http.routers.esphome.entrypoints=websecure
       - traefik.http.routers.esphome.tls=true
-      - traefik.http.routers.esphome.tls.certresolver=letsencrypt
-      - traefik.http.routers.esphome.tls.domains[0].main=esphome.viewpoint.house
       - traefik.http.services.esphome.loadbalancer.server.port=6052
       - traefik.http.services.esphome.loadbalancer.healthcheck.path=/
       - traefik.http.services.esphome.loadbalancer.healthcheck.port=6052
diff --git a/fr24feed/docker-compose.yaml b/fr24feed/docker-compose.yaml
index 0b913700..cba85c05 100644
--- a/fr24feed/docker-compose.yaml
+++ b/fr24feed/docker-compose.yaml
@@ -42,7 +42,6 @@ services:
       - traefik.http.routers.fr24feed.rule=Host(`fr24feed.viewpoint.house`)
       - traefik.http.routers.fr24feed.entrypoints=websecure
       - traefik.http.routers.fr24feed.tls=true
-      - traefik.http.routers.fr24feed.tls.certresolver=letsencrypt
       - traefik.http.services.fr24feed.loadbalancer.server.port=8754
       - traefik.http.services.fr24feed.loadbalancer.healthcheck.path=/
       - traefik.http.services.fr24feed.loadbalancer.healthcheck.port=8754
diff --git a/frigate/docker-compose.yaml b/frigate/docker-compose.yaml
index d74775e7..a2c7de71 100644
--- a/frigate/docker-compose.yaml
+++ b/frigate/docker-compose.yaml
@@ -70,8 +70,6 @@ services:
       - traefik.http.routers.frigate.rule=Host(`cctv.viewpoint.house`)
       - traefik.http.routers.frigate.entrypoints=websecure
       - traefik.http.routers.frigate.tls=true
-      - traefik.http.routers.frigate.tls.certresolver=letsencrypt
-      - traefik.http.routers.frigate.tls.domains[0].main=cctv.viewpoint.house
       - traefik.http.services.frigate.loadbalancer.server.port=5000
       - traefik.http.services.frigate.loadbalancer.healthcheck.path=/
       - traefik.http.services.frigate.loadbalancer.healthcheck.port=5000
diff --git a/givtcp/docker-compose.yaml b/givtcp/docker-compose.yaml
index ff43fe68..290db9bc 100644
--- a/givtcp/docker-compose.yaml
+++ b/givtcp/docker-compose.yaml
@@ -37,8 +37,6 @@ services:
       - traefik.docker.network=traefik_traefik_proxy
       - traefik.http.routers.givtcp.rule=Host(`givtcp.viewpoint.house`)
       - traefik.http.routers.givtcp.entrypoints=websecure
-      - traefik.http.routers.givtcp.tls.certresolver=letsencrypt
-      - traefik.http.routers.givtcp.tls.domains[0].main=givtcp.viewpoint.house
       - traefik.http.services.givtcp.loadbalancer.server.port=8099
       - traefik.http.services.givtcp.loadbalancer.healthcheck.path=/
       - traefik.http.services.givtcp.loadbalancer.healthcheck.port=8099
diff --git a/grafana/docker-compose.yaml b/grafana/docker-compose.yaml
index 4e4c6dd9..9c34d649 100644
--- a/grafana/docker-compose.yaml
+++ b/grafana/docker-compose.yaml
@@ -29,8 +29,6 @@ services:
       - traefik.http.routers.grafana.rule=Host(`grafana.viewpoint.house`)
       - traefik.http.routers.grafana.entrypoints=websecure
       - traefik.http.routers.grafana.tls=true
-      - traefik.http.routers.grafana.tls.certresolver=letsencrypt
-      - traefik.http.routers.grafana.tls.domains[0].main=grafana.viewpoint.house
       - traefik.http.services.grafana.loadbalancer.server.port=3000
       - traefik.http.services.grafana.loadbalancer.healthcheck.path=/
       - traefik.http.services.grafana.loadbalancer.healthcheck.port=3000
diff --git a/graphs1090/docker-compose.yaml b/graphs1090/docker-compose.yaml
index 2f814285..075df43f 100644
--- a/graphs1090/docker-compose.yaml
+++ b/graphs1090/docker-compose.yaml
@@ -53,7 +53,6 @@ services:
       - traefik.http.routers.graphs1090.rule=Host(`graphs1090.viewpoint.house`)
       - traefik.http.routers.graphs1090.entrypoints=websecure
       - traefik.http.routers.graphs1090.tls=true
-      - traefik.http.routers.graphs1090.tls.certresolver=letsencrypt
       - traefik.http.services.graphs1090.loadbalancer.server.port=80
       - traefik.http.services.graphs1090.loadbalancer.healthcheck.path=/
       - traefik.http.services.graphs1090.loadbalancer.healthcheck.port=80
diff --git a/ha-stack/docker-compose.yaml b/ha-stack/docker-compose.yaml
index 2251a16d..14541453 100644
--- a/ha-stack/docker-compose.yaml
+++ b/ha-stack/docker-compose.yaml
@@ -64,8 +64,6 @@ services:
       - traefik.http.routers.hasecure.entrypoints=websecure
       - traefik.http.routers.hasecure.service=ha
       - traefik.http.routers.hasecure.tls=true
-      - traefik.http.routers.hasecure.tls.certresolver=letsencrypt
-      - traefik.http.routers.hasecure.tls.domains[0].main=viewpoint.house
       - traefik.http.services.hasecure.loadbalancer.server.port=8123
       - traefik.http.services.hasecure.loadbalancer.healthcheck.path=/
       - traefik.http.services.hasecure.loadbalancer.healthcheck.port=8123
diff --git a/homebox/docker-compose.yaml b/homebox/docker-compose.yaml
index 97f72128..2aec5a1e 100644
--- a/homebox/docker-compose.yaml
+++ b/homebox/docker-compose.yaml
@@ -38,8 +38,6 @@ services:
       - traefik.http.routers.homebox.rule=Host(`parts.viewpoint.house`)
       - traefik.http.routers.homebox.entrypoints=websecure
       - traefik.http.routers.homebox.tls=true
-      - traefik.http.routers.homebox.tls.certresolver=letsencrypt
-      - traefik.http.routers.homebox.tls.domains[0].main=parts.viewpoint.house
       - traefik.http.services.homebox.loadbalancer.server.port=7745
       - traefik.http.services.homebox.loadbalancer.healthcheck.port=7745
       - traefik.http.services.homebox.loadbalancer.healthcheck.path=/
diff --git a/homepage/docker-compose.yaml b/homepage/docker-compose.yaml
index 61078beb..2b73ecd0 100644
--- a/homepage/docker-compose.yaml
+++ b/homepage/docker-compose.yaml
@@ -27,8 +27,6 @@ services:
       - traefik.http.routers.homepage.rule=Host(`home.viewpoint.house`)
       - traefik.http.routers.homepage.entrypoints=websecure
       - traefik.http.routers.homepage.tls=true
-      - traefik.http.routers.homepage.tls.certresolver=letsencrypt
-      - traefik.http.routers.homepage.tls.domains[0].main=home.viewpoint.house
       - traefik.http.services.homepage.loadbalancer.server.port=3000
       - traefik.http.services.homepage.loadbalancer.healthcheck.path=/
       - traefik.http.services.homepage.loadbalancer.healthcheck.port=3000
diff --git a/hydra/docker-compose.yaml b/hydra/docker-compose.yaml
index 152abaf5..6af60c04 100644
--- a/hydra/docker-compose.yaml
+++ b/hydra/docker-compose.yaml
@@ -43,8 +43,6 @@ services:
       - traefik.http.routers.hydra.rule=Host(`hydra.viewpoint.house`)
       - traefik.http.routers.hydra.entrypoints=websecure
       - traefik.http.routers.hydra.tls=true
-      - traefik.http.routers.hydra.tls.certresolver=letsencrypt
-      - traefik.http.routers.hydra.tls.domains[0].main=hydra.viewpoint.house
       - traefik.http.services.hydra.loadbalancer.server.port=5076
       - traefik.http.services.hydra.loadbalancer.healthcheck.port=5076
       - traefik.http.services.hydra.loadbalancer.healthcheck.path=/
diff --git a/influxdb/docker-compose.yaml b/influxdb/docker-compose.yaml
index 02b85116..ed511d4f 100644
--- a/influxdb/docker-compose.yaml
+++ b/influxdb/docker-compose.yaml
@@ -51,8 +51,6 @@ services:
       - traefik.http.routers.influxdb.rule=Host(`influxdb.viewpoint.house`)
       - traefik.http.routers.influxdb.entrypoints=websecure
       - traefik.http.routers.influxdb.tls=true
-      - traefik.http.routers.influxdb.tls.certresolver=letsencrypt
-      - traefik.http.routers.influxdb.tls.domains[0].main=influxdb.viewpoint.house
       - traefik.http.services.influxdb.loadbalancer.server.port=8086
       - traefik.http.services.influxdb.loadbalancer.healthcheck.path=/
       - traefik.http.services.influxdb.loadbalancer.healthcheck.port=8086
diff --git a/jellyfin/docker-compose.yaml b/jellyfin/docker-compose.yaml
index 983727f3..e4c57907 100644
--- a/jellyfin/docker-compose.yaml
+++ b/jellyfin/docker-compose.yaml
@@ -42,8 +42,6 @@ services:
       - traefik.http.routers.jellyfin.rule=Host(`jellyfin.viewpoint.house`)
       - traefik.http.routers.jellyfin.entrypoints=websecure
       - traefik.http.routers.jellyfin.tls=true
-      - traefik.http.routers.jellyfin.tls.certresolver=letsencrypt
-      - traefik.http.routers.jellyfin.tls.domains[0].main=jellyfin.viewpoint.house
       - traefik.http.services.jellyfin.loadbalancer.server.port=8096
       - traefik.http.services.jellyfin.loadbalancer.healthcheck.port=8096
       - traefik.http.services.jellyfin.loadbalancer.healthcheck.path=/
diff --git a/karakeep/docker-compose.yaml b/karakeep/docker-compose.yaml
index b586b241..8282c071 100644
--- a/karakeep/docker-compose.yaml
+++ b/karakeep/docker-compose.yaml
@@ -41,8 +41,6 @@ services:
       - traefik.http.routers.karakeep.rule=Host(`karakeep.glasgownet.com`)
       - traefik.http.routers.karakeep.entrypoints=websecure
       - traefik.http.routers.karakeep.tls=true
-      - traefik.http.routers.karakeep.tls.certresolver=letsencrypt
-      - traefik.http.routers.karakeep.tls.domains[0].main=karakeep.glasgownet.com
       - traefik.http.services.karakeep.loadbalancer.server.port=3000
       - traefik.http.services.karakeep.loadbalancer.healthcheck.port=3000
       - traefik.http.services.karakeep.loadbalancer.healthcheck.path=/
diff --git a/miniflux/docker-compose.yaml b/miniflux/docker-compose.yaml
index c88bb9cc..e6c04f7a 100644
--- a/miniflux/docker-compose.yaml
+++ b/miniflux/docker-compose.yaml
@@ -35,8 +35,6 @@ services:
       - traefik.http.routers.miniflux.rule=Host(`news.viewpoint.house`)
       - traefik.http.routers.miniflux.entrypoints=websecure
       - traefik.http.routers.miniflux.tls=true
-      - traefik.http.routers.miniflux.tls.certresolver=letsencrypt
-      - traefik.http.routers.miniflux.tls.domains[0].main=news.viewpoint.house
       - traefik.http.services.miniflux.loadbalancer.server.port=8080
       # - traefik.http.services.miniflux.loadbalancer.healthcheck.port=8080
       # - traefik.http.services.miniflux.loadbalancer.healthcheck.path=/
diff --git a/monitoring-stack/docker-compose.yaml b/monitoring-stack/docker-compose.yaml
index 37f85b02..e2ed9e6e 100644
--- a/monitoring-stack/docker-compose.yaml
+++ b/monitoring-stack/docker-compose.yaml
@@ -92,8 +92,6 @@ services:
       - traefik.http.routers.librenms.rule=Host(`nms.viewpoint.house`)
       - traefik.http.routers.librenms.entrypoints=websecure
       - traefik.http.routers.librenms.tls=true
-      - traefik.http.routers.librenms.tls.certresolver=letsencrypt
-      - traefik.http.routers.librenms.tls.domains[0].main=nms.viewpoint.house
       - traefik.http.services.librenms.loadbalancer.server.port=8000
       # - traefik.http.services.librenms.loadbalancer.healthcheck.port=8000
       # - traefik.http.services.librenms.loadbalancer.healthcheck.path=/
@@ -255,8 +253,6 @@ services:
       - traefik.http.routers.speedtest.rule=Host(`speedtest.viewpoint.house`)
       - traefik.http.routers.speedtest.entrypoints=websecure
       - traefik.http.routers.speedtest.tls=true
-      - traefik.http.routers.speedtest.tls.certresolver=letsencrypt
-      - traefik.http.routers.speedtest.tls.domains[0].main=speedtest.viewpoint.house
       - traefik.http.services.speedtest.loadbalancer.server.port=3000
       - traefik.http.services.speedtest.loadbalancer.healthcheck.port=3000
       - traefik.http.services.speedtest.loadbalancer.healthcheck.path=/
@@ -296,8 +292,6 @@ services:
       - traefik.http.routers.smokeping.rule=Host(`smokeping.viewpoint.house`)
       - traefik.http.routers.smokeping.entrypoints=websecure
       - traefik.http.routers.smokeping.tls=true
-      - traefik.http.routers.smokeping.tls.certresolver=letsencrypt
-      - traefik.http.routers.smokeping.tls.domains[0].main=smokeping.viewpoint.house
       - traefik.http.services.smokeping.loadbalancer.server.port=80
       - traefik.http.services.smokeping.loadbalancer.healthcheck.port=80
       - traefik.http.services.smokeping.loadbalancer.healthcheck.path=/
diff --git a/music-assistant/docker-compose.yaml b/music-assistant/docker-compose.yaml
index f1efd0e0..33b8c8ae 100644
--- a/music-assistant/docker-compose.yaml
+++ b/music-assistant/docker-compose.yaml
@@ -47,8 +47,6 @@ services:
       - traefik.http.routers.music.rule=Host(`music.viewpoint.house`)
       - traefik.http.routers.music.entrypoints=websecure
       - traefik.http.routers.music.tls=true
-      - traefik.http.routers.music.tls.certresolver=letsencrypt
-      - traefik.http.routers.music.tls.domains[0].main=music.viewpoint.house
       # - traefik.http.services.music.loadbalancer.server.port=8095
       - traefik.http.services.music.loadbalancer.server.url=http://172.24.32.13:8095
       - traefik.http.services.music.loadbalancer.healthcheck.hostname=172.24.32.13
diff --git a/nginx_core/docker-compose.yaml b/nginx_core/docker-compose.yaml
index 42d7502f..8412291d 100644
--- a/nginx_core/docker-compose.yaml
+++ b/nginx_core/docker-compose.yaml
@@ -43,8 +43,6 @@ services:
       - traefik.http.routers.nginx_core-https.rule=Host(`core.viewpoint.house`)
       - traefik.http.routers.nginx_core-https.entrypoints=websecure
       - traefik.http.routers.nginx_core-https.tls=true
-      - traefik.http.routers.nginx_core-https.tls.certresolver=letsencrypt
-      - traefik.http.routers.nginx_core-https.tls.domains[0].main=core.viewpoint.house
       - homepage.group=Management
       - homepage.name=Core Web
       - homepage.href=https://core.viewpoint.house
diff --git a/node-red/docker-compose.yaml b/node-red/docker-compose.yaml
index 822224fa..0cf6ab51 100644
--- a/node-red/docker-compose.yaml
+++ b/node-red/docker-compose.yaml
@@ -24,8 +24,6 @@ services:
       - traefik.http.routers.nodered.rule=Host(`nodered.viewpoint.house`)
       - traefik.http.routers.nodered.entrypoints=websecure
       - traefik.http.routers.nodered.tls=true
-      - traefik.http.routers.nodered.tls.certresolver=letsencrypt
-      - traefik.http.routers.nodered.tls.domains[0].main=nodered.viewpoint.house
       - traefik.http.services.nodered.loadbalancer.server.port=1880
       - traefik.http.services.nodered.loadbalancer.healthcheck.path=/
       - traefik.http.services.nodered.loadbalancer.healthcheck.port=1880
diff --git a/nzbget/docker-compose.yaml b/nzbget/docker-compose.yaml
index 03054787..b6e31698 100644
--- a/nzbget/docker-compose.yaml
+++ b/nzbget/docker-compose.yaml
@@ -52,8 +52,6 @@ services:
       - traefik.http.routers.nzbget.rule=Host(`nzbget.viewpoint.house`)
       - traefik.http.routers.nzbget.entrypoints=websecure
       - traefik.http.routers.nzbget.tls=true
-      - traefik.http.routers.nzbget.tls.certresolver=letsencrypt
-      - traefik.http.routers.nzbget.tls.domains[0].main=nzbget.viewpoint.house
       - traefik.http.services.nzbget.loadbalancer.server.port=6789
       # - traefik.http.services.nzbget.loadbalancer.healthcheck.port=6789
       # - traefik.http.services.nzbget.loadbalancer.healthcheck.path=/
diff --git a/ollama/docker-compose.yaml b/ollama/docker-compose.yaml
index 86c8adeb..77c15b97 100644
--- a/ollama/docker-compose.yaml
+++ b/ollama/docker-compose.yaml
@@ -100,8 +100,6 @@ services:
       - traefik.http.middlewares.ollama-https.redirectscheme.scheme=https
       - traefik.http.routers.ollama-webui.rule=Host(`ollama.viewpoint.house`)
       - traefik.http.routers.ollama-webui.entrypoints=websecure
-      - traefik.http.routers.ollama-webui.tls.certresolver=letsencrypt
-      - traefik.http.routers.ollama-webui.tls.domains[0].main=ollama.viewpoint.house
       - traefik.http.services.ollama-webui.loadbalancer.server.port=8080
       - traefik.http.services.ollama-webui.loadbalancer.healthcheck.path=/
       - traefik.http.services.ollama-webui.loadbalancer.healthcheck.port=8080
diff --git a/paperless/docker-compose.yaml b/paperless/docker-compose.yaml
index 385639d6..d80b457f 100644
--- a/paperless/docker-compose.yaml
+++ b/paperless/docker-compose.yaml
@@ -98,8 +98,6 @@ services:
       - traefik.http.routers.paperless.rule=Host(`paperless.viewpoint.house`)
       - traefik.http.routers.paperless.entrypoints=websecure
       - traefik.http.routers.paperless.tls=true
-      - traefik.http.routers.paperless.tls.certresolver=letsencrypt
-      - traefik.http.routers.paperless.tls.domains[0].main=paperless.viewpoint.house
       - traefik.http.services.paperless.loadbalancer.server.port=8000
       # - traefik.http.routers.paperless.middlewares=authelia@docker
       - homepage.group=Media
diff --git a/peanut/docker-compose.yaml b/peanut/docker-compose.yaml
index 829ad7f4..ff29e233 100644
--- a/peanut/docker-compose.yaml
+++ b/peanut/docker-compose.yaml
@@ -33,8 +33,6 @@ services:
       - traefik.http.routers.peanut.rule=Host(`peanut.viewpoint.house`)
       - traefik.http.routers.peanut.entrypoints=websecure
       - traefik.http.routers.peanut.tls=true
-      - traefik.http.routers.peanut.tls.certresolver=letsencrypt
-      - traefik.http.routers.peanut.tls.domains[0].main=peanut.viewpoint.house
       - traefik.http.services.peanut.loadbalancer.server.port=8080
       - traefik.http.services.peanut.loadbalancer.healthcheck.port=8080
       - traefik.http.services.peanut.loadbalancer.healthcheck.path=/
diff --git a/photoprism/docker-compose.yaml b/photoprism/docker-compose.yaml
index 65cf7660..5e7da49d 100644
--- a/photoprism/docker-compose.yaml
+++ b/photoprism/docker-compose.yaml
@@ -94,8 +94,6 @@ services:
       - traefik.http.routers.photos.rule=Host(`photos.viewpoint.house`)
       - traefik.http.routers.photos.entrypoints=websecure
       - traefik.http.routers.photos.tls=true
-      - traefik.http.routers.photos.tls.certresolver=letsencrypt
-      - traefik.http.routers.photos.tls.domains[0].main=photos.viewpoint.house
       - traefik.http.services.photos.loadbalancer.server.port=2342
       - traefik.http.services.photos.loadbalancer.healthcheck.path=/
       - traefik.http.services.photos.loadbalancer.healthcheck.port=2342
diff --git a/phpmyadmin/docker-compose.yaml b/phpmyadmin/docker-compose.yaml
index 412ad3aa..5e6bfa6e 100644
--- a/phpmyadmin/docker-compose.yaml
+++ b/phpmyadmin/docker-compose.yaml
@@ -31,8 +31,6 @@ services:
       - traefik.http.routers.phpmyadmin.rule=Host(`phpmyadmin.viewpoint.house`)
       - traefik.http.routers.phpmyadmin.entrypoints=websecure
       - traefik.http.routers.phpmyadmin.tls=true
-      - traefik.http.routers.phpmyadmin.tls.certresolver=letsencrypt
-      - traefik.http.routers.phpmyadmin.tls.domains[0].main=phpmyadmin.viewpoint.house
       - traefik.http.services.phpmyadmin.loadbalancer.server.port=80
       - traefik.http.services.phpmyadmin.loadbalancer.healthcheck.port=80
       - traefik.http.services.phpmyadmin.loadbalancer.healthcheck.path=/
diff --git a/piaware/docker-compose.yaml b/piaware/docker-compose.yaml
index 7c32ccfb..d0a71c8c 100644
--- a/piaware/docker-compose.yaml
+++ b/piaware/docker-compose.yaml
@@ -47,7 +47,6 @@ services:
       - traefik.http.routers.piaware.rule=Host(`piaware.viewpoint.house`)
       - traefik.http.routers.piaware.entrypoints=websecure
       - traefik.http.routers.piaware.tls=true
-      - traefik.http.routers.piaware.tls.certresolver=letsencrypt
       - traefik.http.services.piaware01.loadbalancer.server.port=8080
       - traefik.http.services.piaware01.loadbalancer.healthcheck.path=/
       - traefik.http.services.piaware01.loadbalancer.healthcheck.port=8080
diff --git a/pihole/docker-compose.yaml b/pihole/docker-compose.yaml
index 7121e34a..f7ba6327 100644
--- a/pihole/docker-compose.yaml
+++ b/pihole/docker-compose.yaml
@@ -29,8 +29,6 @@ services:
       - traefik.http.middlewares.pihole-https.redirectscheme.scheme=https
       - traefik.http.routers.pihole.rule=Host(`pihole.viewpoint.house`)
       - traefik.http.routers.pihole.tls=true
-      - traefik.http.routers.pihole.tls.certresolver=letsencrypt
-      - traefik.http.routers.pihole.tls.domains[0].main=pihole.viewpoint.house
       - traefik.http.routers.pihole.entrypoints=websecure
       - traefik.http.services.pihole.loadbalancer.server.port=80
       - traefik.http.services.pihole.loadbalancer.healthcheck.path=/admin/login.php
diff --git a/planefinder/docker-compose.yaml b/planefinder/docker-compose.yaml
index 9eff2301..1168b27b 100644
--- a/planefinder/docker-compose.yaml
+++ b/planefinder/docker-compose.yaml
@@ -34,7 +34,6 @@ services:
       - traefik.http.routers.planefinder.rule=Host(`planefinder.viewpoint.house`)
       - traefik.http.routers.planefinder.entrypoints=websecure
       - traefik.http.routers.planefinder.tls=true
-      - traefik.http.routers.planefinder.tls.certresolver=letsencrypt
       - traefik.http.services.planefinder.loadbalancer.server.port=30053
       - traefik.http.services.planefinder.loadbalancer.healthcheck.path=/
       - traefik.http.services.planefinder.loadbalancer.healthcheck.port=30053
diff --git a/predbat/docker-compose.yaml b/predbat/docker-compose.yaml
index f8e7e101..a705b9b6 100644
--- a/predbat/docker-compose.yaml
+++ b/predbat/docker-compose.yaml
@@ -29,8 +29,6 @@ services:
       - traefik.docker.network=traefik_traefik_proxy
       - traefik.http.routers.predbat.rule=Host(`predbat.viewpoint.house`)
       - traefik.http.routers.predbat.entrypoints=websecure
-      - traefik.http.routers.predbat.tls.certresolver=letsencrypt
-      - traefik.http.routers.predbat.tls.domains[0].main=predbat.viewpoint.house
       - traefik.http.services.predbat.loadbalancer.server.port=5052
       - traefik.http.services.predbat.loadbalancer.healthcheck.path=/
       - traefik.http.services.predbat.loadbalancer.healthcheck.port=5052
diff --git a/radarr/docker-compose.yaml b/radarr/docker-compose.yaml
index 089941d1..8258a517 100644
--- a/radarr/docker-compose.yaml
+++ b/radarr/docker-compose.yaml
@@ -35,8 +35,6 @@ services:
       - traefik.http.routers.radarr.rule=Host(`movies.viewpoint.house`)
       - traefik.http.routers.radarr.entrypoints=websecure
       - traefik.http.routers.radarr.tls=true
-      - traefik.http.routers.radarr.tls.certresolver=letsencrypt
-      - traefik.http.routers.radarr.tls.domains[0].main=movies.viewpoint.house
       - traefik.http.services.radarr.loadbalancer.server.port=7878
       - traefik.http.services.radarr.loadbalancer.healthcheck.port=7878
       - traefik.http.services.radarr.loadbalancer.healthcheck.path=/
diff --git a/rss/docker-compose.yaml b/rss/docker-compose.yaml
index ff2b8e9f..e209659c 100644
--- a/rss/docker-compose.yaml
+++ b/rss/docker-compose.yaml
@@ -85,8 +85,6 @@ services:
       - traefik.http.routers.freshrss.rule=Host(`rss.glasgownet.com`)
       - traefik.http.routers.freshrss.entrypoints=websecure
       - traefik.http.routers.freshrss.tls=true
-      - traefik.http.routers.freshrss.tls.certresolver=letsencrypt
-      - traefik.http.routers.freshrss.tls.domains[0].main=rss.glasgownet.com
       - traefik.http.services.freshrss.loadbalancer.server.port=80
       - traefik.http.services.freshrss.loadbalancer.healthcheck.path=/
       - traefik.http.services.freshrss.loadbalancer.healthcheck.port=80
diff --git a/scrutiny/docker-compose.yaml b/scrutiny/docker-compose.yaml
index 1d6d2871..0bfe0d95 100644
--- a/scrutiny/docker-compose.yaml
+++ b/scrutiny/docker-compose.yaml
@@ -54,7 +54,6 @@ services:
       - traefik.http.routers.scrutiny-web.rule=Host(`scrutiny.viewpoint.house`)
       - traefik.http.routers.scrutiny-web.entrypoints=websecure
       - traefik.http.routers.scrutiny-web.tls=true
-      - traefik.http.routers.scrutiny-web.tls.certresolver=letsencrypt
       - traefik.http.services.scrutiny-web.loadbalancer.server.port=8080
       - traefik.http.services.scrutiny-web.loadbalancer.healthcheck.path=/api/health
       - traefik.http.services.scrutiny-web.loadbalancer.healthcheck.port=8080
diff --git a/social-stack/docker-compose.yaml b/social-stack/docker-compose.yaml
index 5508b974..6529385d 100644
--- a/social-stack/docker-compose.yaml
+++ b/social-stack/docker-compose.yaml
@@ -51,8 +51,6 @@ services:
       - traefik.http.routers.firefish.rule=Host(`social.glasgownet.com`)
       - traefik.http.routers.firefish.entrypoints=websecure
       - traefik.http.routers.firefish.tls=true
-      - traefik.http.routers.firefish.tls.certresolver=letsencrypt
-      - traefik.http.routers.firefish.tls.domains[0].main=social.glasgownet.com
       - traefik.http.services.firefish.loadbalancer.server.port=3000
       - traefik.http.services.firefish.loadbalancer.healthcheck.path=/
       - traefik.http.services.firefish.loadbalancer.healthcheck.port=3000
diff --git a/sonarr/docker-compose.yaml b/sonarr/docker-compose.yaml
index 6caaeddf..0b99e9d0 100644
--- a/sonarr/docker-compose.yaml
+++ b/sonarr/docker-compose.yaml
@@ -35,8 +35,6 @@ services:
       - traefik.http.routers.sonarr.rule=Host(`tv.viewpoint.house`)
       - traefik.http.routers.sonarr.entrypoints=websecure
       - traefik.http.routers.sonarr.tls=true
-      - traefik.http.routers.sonarr.tls.certresolver=letsencrypt
-      - traefik.http.routers.sonarr.tls.domains[0].main=tv.viewpoint.house
       - traefik.http.services.sonarr.loadbalancer.server.port=8989
       - traefik.http.services.sonarr.loadbalancer.healthcheck.port=8989
       - traefik.http.services.sonarr.loadbalancer.healthcheck.path=/
diff --git a/tdarr/docker-compose.yaml b/tdarr/docker-compose.yaml
index 107876d2..3ffb5cac 100644
--- a/tdarr/docker-compose.yaml
+++ b/tdarr/docker-compose.yaml
@@ -60,8 +60,6 @@ services:
       - traefik.http.routers.tdarr.rule=Host(`tdarr.viewpoint.house`)
       - traefik.http.routers.tdarr.entrypoints=websecure
       - traefik.http.routers.tdarr.tls=true
-      - traefik.http.routers.tdarr.tls.certresolver=letsencrypt
-      - traefik.http.routers.tdarr.tls.domains[0].main=tdarr.viewpoint.house
       - traefik.http.services.tdarr.loadbalancer.server.port=8265
       - traefik.http.services.tdarr.loadbalancer.healthcheck.port=8265
       - traefik.http.services.tdarr.loadbalancer.healthcheck.path=/
diff --git a/traefik/docker-compose-deepcore.yaml b/traefik/docker-compose-deepcore.yaml
index 87a12843..453e6809 100644
--- a/traefik/docker-compose-deepcore.yaml
+++ b/traefik/docker-compose-deepcore.yaml
@@ -33,10 +33,18 @@ services:
       - --certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json
     labels:
       # Configure wildcard certificates for viewpoint.house domain
+      - "traefik.http.routers.wildcard-viewpoint.rule=Host(`viewpoint.house`)"
+      - "traefik.http.routers.wildcard-viewpoint.entrypoints=websecure"
+      - "traefik.http.routers.wildcard-viewpoint.service=api@internal"
+      - "traefik.http.routers.wildcard-viewpoint.tls=true"
       - "traefik.http.routers.wildcard-viewpoint.tls.certresolver=letsencrypt"
       - "traefik.http.routers.wildcard-viewpoint.tls.domains[0].main=viewpoint.house"
       - "traefik.http.routers.wildcard-viewpoint.tls.domains[0].sans=*.viewpoint.house"
       # Configure wildcard certificates for glasgownet.com domain
+      - "traefik.http.routers.wildcard-glasgownet.rule=Host(`glasgownet.com`)"
+      - "traefik.http.routers.wildcard-glasgownet.entrypoints=websecure"
+      - "traefik.http.routers.wildcard-glasgownet.service=api@internal"
+      - "traefik.http.routers.wildcard-glasgownet.tls=true"
       - "traefik.http.routers.wildcard-glasgownet.tls.certresolver=letsencrypt"
       - "traefik.http.routers.wildcard-glasgownet.tls.domains[0].main=glasgownet.com"
       - "traefik.http.routers.wildcard-glasgownet.tls.domains[0].sans=*.glasgownet.com"
diff --git a/traefik/docker-compose.yaml b/traefik/docker-compose.yaml
index 19e26ce8..8d79a8a0 100644
--- a/traefik/docker-compose.yaml
+++ b/traefik/docker-compose.yaml
@@ -50,10 +50,18 @@ services:
       - --certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json
     labels:
       # Configure wildcard certificates for viewpoint.house domain
+      - "traefik.http.routers.wildcard-viewpoint.rule=Host(`viewpoint.house`)"
+      - "traefik.http.routers.wildcard-viewpoint.entrypoints=websecure"
+      - "traefik.http.routers.wildcard-viewpoint.service=api@internal"
+      - "traefik.http.routers.wildcard-viewpoint.tls=true"
       - "traefik.http.routers.wildcard-viewpoint.tls.certresolver=letsencrypt"
       - "traefik.http.routers.wildcard-viewpoint.tls.domains[0].main=viewpoint.house"
       - "traefik.http.routers.wildcard-viewpoint.tls.domains[0].sans=*.viewpoint.house"
       # Configure wildcard certificates for glasgownet.com domain
+      - "traefik.http.routers.wildcard-glasgownet.rule=Host(`glasgownet.com`)"
+      - "traefik.http.routers.wildcard-glasgownet.entrypoints=websecure"
+      - "traefik.http.routers.wildcard-glasgownet.service=api@internal"
+      - "traefik.http.routers.wildcard-glasgownet.tls=true"
       - "traefik.http.routers.wildcard-glasgownet.tls.certresolver=letsencrypt"
       - "traefik.http.routers.wildcard-glasgownet.tls.domains[0].main=glasgownet.com"
       - "traefik.http.routers.wildcard-glasgownet.tls.domains[0].sans=*.glasgownet.com"
diff --git a/unifi/docker-compose.yaml b/unifi/docker-compose.yaml
index cc38f229..f46ddf55 100644
--- a/unifi/docker-compose.yaml
+++ b/unifi/docker-compose.yaml
@@ -40,8 +40,6 @@ services:
       - traefik.http.routers.unifi-controller.rule=Host(`unifi.viewpoint.house`)
       - traefik.http.routers.unifi-controller.entrypoints=websecure
       - traefik.http.routers.unifi-controller.tls=true
-      - traefik.http.routers.unifi-controller.tls.certresolver=letsencrypt
-      - traefik.http.routers.unifi-controller.tls.domains[0].main=unifi.viewpoint.house
       - traefik.http.services.unifi-controller.loadbalancer.server.port=8081
       - traefik.http.services.unifi-controller.loadbalancer.server.scheme=https
       # - traefik.http.services.unifi-controller.loadbalancer.healthcheck.path=/
diff --git a/uptime-kuma/docker-compose.yaml b/uptime-kuma/docker-compose.yaml
index 0cec4afa..dd839009 100644
--- a/uptime-kuma/docker-compose.yaml
+++ b/uptime-kuma/docker-compose.yaml
@@ -35,8 +35,6 @@ services:
       - traefik.http.routers.uptime.rule=Host(`uptime.viewpoint.house`)
       - traefik.http.routers.uptime.entrypoints=websecure
       - traefik.http.routers.uptime.tls=true
-      - traefik.http.routers.uptime.tls.certresolver=letsencrypt
-      - traefik.http.routers.uptime.tls.domains[0].main=uptime.viewpoint.house
       - traefik.http.services.uptime.loadbalancer.server.port=3001
       - traefik.http.services.uptime.loadbalancer.healthcheck.path=/
       - traefik.http.services.uptime.loadbalancer.healthcheck.port=3001
diff --git a/wallabag/docker-compose.yaml b/wallabag/docker-compose.yaml
index d5b43210..968bd246 100644
--- a/wallabag/docker-compose.yaml
+++ b/wallabag/docker-compose.yaml
@@ -27,8 +27,6 @@ services:
       - traefik.http.routers.wallabag.rule=Host(`pocket.glasgownet.com`)
       - traefik.http.routers.wallabag.entrypoints=websecure
       - traefik.http.routers.wallabag.tls=true
-      - traefik.http.routers.wallabag.tls.certresolver=letsencrypt
-      - traefik.http.routers.wallabag.tls.domains[0].main=pocket.glasgownet.com
       - traefik.http.services.wallabag.loadbalancer.server.port=80
       - traefik.http.services.wallabag.loadbalancer.healthcheck.path=/
       - traefik.http.services.wallabag.loadbalancer.healthcheck.port=80
diff --git a/warpgate/docker-compose.yaml b/warpgate/docker-compose.yaml
index ed3a0e84..09bb8d36 100644
--- a/warpgate/docker-compose.yaml
+++ b/warpgate/docker-compose.yaml
@@ -35,8 +35,6 @@ services:
       - traefik.http.routers.warpgate.rule=Host(`warpgate.viewpoint.house`)
       - traefik.http.routers.warpgate.entrypoints=websecure
       - traefik.http.routers.warpgate.tls=true
-      - traefik.http.routers.warpgate.tls.certresolver=letsencrypt
-      - traefik.http.routers.warpgate.tls.domains[0].main=warpgate.viewpoint.house
       - traefik.http.services.warpgate.loadbalancer.server.port=9999
       # - traefik.http.services.warpgate.loadbalancer.healthcheck.path=/
       # - traefik.http.services.warpgate.loadbalancer.healthcheck.port=9999
diff --git a/whatsupdocker/docker-compose.yaml b/whatsupdocker/docker-compose.yaml
index aaf334ef..46bf81fb 100644
--- a/whatsupdocker/docker-compose.yaml
+++ b/whatsupdocker/docker-compose.yaml
@@ -31,8 +31,6 @@ services:
       - traefik.http.routers.wud.rule=Host(`wud.viewpoint.house`)
       - traefik.http.routers.wud.entrypoints=websecure
       - traefik.http.routers.wud.tls=true
-      - traefik.http.routers.wud.tls.certresolver=letsencrypt
-      - traefik.http.routers.wud.tls.domains[0].main=wud.viewpoint.house
       - traefik.http.services.wud.loadbalancer.server.port=3000
       - traefik.http.services.wud.loadbalancer.healthcheck.path=/
       - traefik.http.services.wud.loadbalancer.healthcheck.port=3000
diff --git a/zigbee2mqtt/docker-compose.yaml b/zigbee2mqtt/docker-compose.yaml
index be2e2cca..1b13275a 100644
--- a/zigbee2mqtt/docker-compose.yaml
+++ b/zigbee2mqtt/docker-compose.yaml
@@ -30,8 +30,6 @@ services:
       - traefik.http.routers.z2m.rule=Host(`z2m.viewpoint.house`)
       - traefik.http.routers.z2m.entrypoints=websecure
       - traefik.http.routers.z2m.tls=true
-      - traefik.http.routers.z2m.tls.certresolver=letsencrypt
-      - traefik.http.routers.z2m.tls.domains[0].main=z2m.viewpoint.house
       - traefik.http.services.z2m.loadbalancer.server.port=8080
       - traefik.http.services.z2m.loadbalancer.healthcheck.path=/
       - traefik.http.services.z2m.loadbalancer.healthcheck.port=8080

From 42c4ef9133ae27f9c9f5aea5acacabb03bc002f9 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 24 Feb 2026 20:06:18 +0000
Subject: [PATCH 5/5] Add missing tls=true to services that were missing it

Co-authored-by: kylegordon <231528+kylegordon@users.noreply.github.com>
---
 eplzones/docker-compose.yaml | 1 +
 givtcp/docker-compose.yaml   | 1 +
 ollama/docker-compose.yaml   | 1 +
 predbat/docker-compose.yaml  | 1 +
 4 files changed, 4 insertions(+)

diff --git a/eplzones/docker-compose.yaml b/eplzones/docker-compose.yaml
index 4a5603ce..013a7f18 100644
--- a/eplzones/docker-compose.yaml
+++ b/eplzones/docker-compose.yaml
@@ -37,6 +37,7 @@ services:
       - traefik.docker.network=traefik_traefik_proxy
       - traefik.http.routers.EPLZones.rule=Host(`eplzones.viewpoint.house`)
       - traefik.http.routers.EPLZones.entrypoints=websecure
+      - traefik.http.routers.EPLZones.tls=true
       - traefik.http.services.EPLZones.loadbalancer.server.port=42069
       - traefik.http.services.EPLZones.loadbalancer.healthcheck.path=/
       - traefik.http.services.EPLZones.loadbalancer.healthcheck.port=42069
diff --git a/givtcp/docker-compose.yaml b/givtcp/docker-compose.yaml
index 290db9bc..c20d4804 100644
--- a/givtcp/docker-compose.yaml
+++ b/givtcp/docker-compose.yaml
@@ -37,6 +37,7 @@ services:
       - traefik.docker.network=traefik_traefik_proxy
       - traefik.http.routers.givtcp.rule=Host(`givtcp.viewpoint.house`)
       - traefik.http.routers.givtcp.entrypoints=websecure
+      - traefik.http.routers.givtcp.tls=true
       - traefik.http.services.givtcp.loadbalancer.server.port=8099
       - traefik.http.services.givtcp.loadbalancer.healthcheck.path=/
       - traefik.http.services.givtcp.loadbalancer.healthcheck.port=8099
diff --git a/ollama/docker-compose.yaml b/ollama/docker-compose.yaml
index 77c15b97..cb57951f 100644
--- a/ollama/docker-compose.yaml
+++ b/ollama/docker-compose.yaml
@@ -100,6 +100,7 @@ services:
       - traefik.http.middlewares.ollama-https.redirectscheme.scheme=https
       - traefik.http.routers.ollama-webui.rule=Host(`ollama.viewpoint.house`)
       - traefik.http.routers.ollama-webui.entrypoints=websecure
+      - traefik.http.routers.ollama-webui.tls=true
       - traefik.http.services.ollama-webui.loadbalancer.server.port=8080
       - traefik.http.services.ollama-webui.loadbalancer.healthcheck.path=/
       - traefik.http.services.ollama-webui.loadbalancer.healthcheck.port=8080
diff --git a/predbat/docker-compose.yaml b/predbat/docker-compose.yaml
index a705b9b6..dd824c9e 100644
--- a/predbat/docker-compose.yaml
+++ b/predbat/docker-compose.yaml
@@ -29,6 +29,7 @@ services:
       - traefik.docker.network=traefik_traefik_proxy
       - traefik.http.routers.predbat.rule=Host(`predbat.viewpoint.house`)
       - traefik.http.routers.predbat.entrypoints=websecure
+      - traefik.http.routers.predbat.tls=true
       - traefik.http.services.predbat.loadbalancer.server.port=5052
       - traefik.http.services.predbat.loadbalancer.healthcheck.path=/
       - traefik.http.services.predbat.loadbalancer.healthcheck.port=5052