http:
  routers:
{% for service in proxied_services %}
    {{ service.name }}:
      rule: "Host(`{{ service.domain }}`)"
      service: {{ service.name }}-service
      entryPoints:
        - {{ 'websecure' if traefik_use_ssl else 'web' }}
{% if traefik_use_ssl %}
      tls:
{% if traefik_cert_mode == 'acme' %}
        certResolver: {{ traefik_ssl_cert_resolver }}
{% else %}
        {}
{% endif %}
{% endif %}
{% endfor %}

  services:
{% for service in proxied_services %}
    {{ service.name }}-service:
      loadBalancer:
        passHostHeader: true
        servers:
          - url: "{{ service.protocol }}://{{ service.backend_host }}:{{ service.port }}"
{% if service.protocol == 'https' and traefik_cert_mode == 'selfsigned' %}
        serversTransport: insecure-transport
{% endif %}
{% endfor %}

{% if traefik_cert_mode == 'selfsigned' %}
  serversTransports:
    insecure-transport:
      insecureSkipVerify: true
{% endif %}