# OpenRemote via Traefik (HTTPS)
http:
  routers:
    # Keycloak auth routes — HIGHER priority (matched first)
    openremote-keycloak:
      rule: "Host(`openremote.digitribe.fr`) && PathPrefix(`/auth`)"
      entryPoints:
        - websecure
      service: openremote-keycloak
      tls:
        certResolver: letsencrypt
      priority: 200
    # OpenRemote Manager — catches everything else on this host
    openremote-manager:
      rule: "Host(`openremote.digitribe.fr`)"
      entryPoints:
        - websecure
      service: openremote-manager
      tls:
        certResolver: letsencrypt
      priority: 100
    openremote-manager-http:
      rule: "Host(`openremote.digitribe.fr`)"
      entryPoints:
        - web
      service: openremote-manager
      priority: 100
  services:
    openremote-manager:
      loadBalancer:
        servers:
          - url: "http://openremote_manager_1:8080"
    openremote-keycloak:
      loadBalancer:
        servers:
          - url: "http://openremote-keycloak-1:8080"