# Traefik Dynamic Configuration - Multi-tenant Routing Rules
http:
  middlewares:
    security-headers:
      headers:
        customResponseHeaders:
          X-Content-Type-Options: nosniff
          X-Frame-Options: SAMEORIGIN
          X-XSS-Protection: "1; mode=block"

  routers:
    # API Backend Router
    api-router:
      entryPoints:
        - web
      rule: "HostRegexp(`{subdomain:.+}.localhost`) || Host(`api.localhost`)"
      middlewares:
        - security-headers
      service: api-service

  services:
    api-service:
      loadBalancer:
        servers:
          - url: http://backend:8080