http:
  routers:
    media-fallback-public:
      # rule: "HostRegexp(`{host:.+}`)" 
      # rule: "Host(`whoami1.riverrooks.dev`)"
      # rule: "Host(`*.riverrooks.dev`)"
      rule: 'HostRegexp(`^[a-z0-9-]+\.riverrooks\.dev$`)'
      priority: 1
      entrypoints:
        - websecure
      service: remote-traefik-svc
      tls:
        certResolver: desecresolver # Here the VPS terminates TLS
        domains:
          - main: "riverrooks.dev"
            sans:
              - "*.riverrooks.dev"

    media-fallback-private:
      rule: 'HostRegexp(`^[a-z0-9-]+\.dfnk$`)'
      priority: 1
      entrypoints:
        - websecure
      service: remote-traefik-svc
      tls: {}

  services:
    remote-traefik-svc:
      loadBalancer:
        servers:
          - url: "http://192.168.1.35:80"