loadbalancer/config/dynamic/tcp-services.yml

http:
  routers:
    lab-younerd-acme:
      entryPoints:
        - web
      rule: "Host(`lab.younerd.org`) && PathPrefix(`/.well-known/acme-challenge/`)"
      service: lab-younerd-acme

    azionelab-acme:
      entryPoints:
        - web
      rule: "(Host(`azionelab.org`) || Host(`www.azionelab.org`)) && PathPrefix(`/.well-known/acme-challenge/`)"
      service: azionelab-acme

  services:
    lab-younerd-acme:
      loadBalancer:
        servers:
          - url: "http://host.docker.internal:8080"

    azionelab-acme:
      loadBalancer:
        servers:
          - url: "http://host.docker.internal:9080"

tcp:
  routers:
    lab-younerd:
      entryPoints:
        - tls
      rule: "HostSNI(`lab.younerd.org`)"
      service: lab-younerd
      tls:
        passthrough: true

    azionelab:
      entryPoints:
        - tls
      rule: "HostSNI(`azionelab.org`) || HostSNI(`www.azionelab.org`)"
      service: azionelab
      tls:
        passthrough: true

  services:
    lab-younerd:
      loadBalancer:
        servers:
          - address: "host.docker.internal:8443"

    azionelab:
      loadBalancer:
        servers:
          - address: "host.docker.internal:9443"