{ config, pkgs, ... }:

{
  services.traefik.dynamicConfigOptions = {
    http = {
#      middlewares = {
#        cors = {
#          headers = {
#            #accessControlAllowMethods = [ "GET" "PUT" "OPTIONS" "POST" ];
#            accessControlAllowMethods = [ "GET" "PUT" ];
#            accessControlAllowHeaders = [ "Content-Type" ];
#            accessControlAllowOriginList = [ "*" ];
#            accessControlAllowCredentials = true;
#            accessControlMaxAge = 600;
#          };
#        };
#      };

      routers = {
        upload = {
          rule = "Host(`upload.${config.domain}`)";
          tls = {
            certResolver = "cloudflare";
          };
          service = "upload";
          #middlewares = [ "cors" ];
          entryPoints = [ "websecure" ];
        };
      };

      services = {
        upload = {
          loadBalancer = {
            servers = [
              { url = "http://${config.tailnetIPs.pinix}:5280/"; }
            ];
          };
        };
      };
    };
  };
}