# ./traefik/dynamic_conf.yml

tcp:
  routers:
    # Router for HTTPS (Passthrough)
    nginx-secure-router:
      rule: "HostSNI(`*`)"
      service: nginx-secure-service
      # Passthrough must be true for SSL to reach Nginx encrypted
      tls:
        passthrough: true
      entryPoints:
        - "https"

  services:
    # Service defining the external IP
    nginx-secure-service:
      loadBalancer:
        servers:
          # This is the actual external IP and Port of your Nginx
          - address: "192.168.1.85:443"