{ config, ... }:
{
  services.traefik.dynamicConfigOptions.http = {
    routers.calendar-web = {
      rule = "Host(`cal.${config.domain}`)";
      entryPoints = [ "websecure" ];
      service = "calendar-web";
      tls.certResolver = "cloudflare";
    };

    services.calendar-web.loadBalancer.servers = [
      { url = "http://${config.tailnetIPs.pinix}:5001"; }
    ];
  };
}