http:
  routers:
    cockpit:
      rule: "Host(`{{ vault_domain }}`) && (PathPrefix(`/admin/`) || Path(`/admin`))"
      entryPoints: https
      middlewares:
        - drop-xforwarded-proto
      service: cockpit
      tls:
        certresolver: wildcard

  middlewares:
    drop-xforwarded-proto:
      headers:
        customrequestheaders:
          X-Forwarded-Proto: ""

  services:
    cockpit:
      loadBalancer:
        serversTransport: nocertverify
        servers:
          - url: "https://{{ hostvars[inventory_hostname]['ansible_default_ipv4']['address'] }}:9090/admin/"

  serversTransports:
    nocertverify:
      insecureSkipVerify: true