[http]
  [http.middlewares]
    [http.middlewares.sec-headers.headers]
      frameDeny = true
      browserXssFilter = true
      contentTypeNosniff = true
      forceSTSHeader = true
      stsIncludeSubdomains = true
      stsPreload = true
      stsSeconds = 63072000
      customFrameOptionsValue = "SAMEORIGIN"

[tcp]
  [tcp.routers]
    [tcp.routers.teleport]
      entryPoints = ["websecure"]
      rule = "HostSNIRegexp(`teleport.unjx.de`, `{subdomain:[a-z]+}.teleport.unjx.de`)"
      service = "teleport"
      [tcp.routers.teleport.tls]
        passthrough = true

  [tcp.services]
    [tcp.services.teleport.loadBalancer]
      [[tcp.services.teleport.loadBalancer.servers]]
          address = "172.18.0.1:3080"

[tls]
  [tls.options]
    [tls.options.default]
      minVersion = "VersionTLS13"
      sniStrict = true