diff --git a/_traefik/dynamic/_templates/rt.kateryna-app.yml.tmpl b/_traefik/dynamic/_templates/rt.kateryna-app.yml.tmpl
new file mode 100644
index 0000000..48122dd
--- /dev/null
+++ b/_traefik/dynamic/_templates/rt.kateryna-app.yml.tmpl
@@ -0,0 +1,19 @@
+# http routing section
+http:
+  routers:
+    <app>-on-kateryna:
+      service: kateryna-<app>
+      rule: Host(`<app>.szk.li`) && PathPrefix(`/`)
+      entrypoints:
+      - websecure
+      tls:
+        certresolver: myresolver
+      middlewares:
+      - authentik_sysmgr
+
+  services:
+    # Define how to reach an existing service on our infrastructure
+    kateryna-<app>:
+      loadBalancer:
+        servers:
+        - url: http://192.168.222.43:80
\ No newline at end of file
diff --git a/_traefik/dynamic/_templates/rt.kateryna-jd.yml.sz b/_traefik/dynamic/_templates/rt.kateryna-jd.yml.sz
new file mode 100644
index 0000000..8b00cde
--- /dev/null
+++ b/_traefik/dynamic/_templates/rt.kateryna-jd.yml.sz
@@ -0,0 +1,19 @@
+# http routing section
+http:
+  routers:
+    jd-on-kateryna:
+      service: kateryna-jd
+      rule: Host(`jd.szk.li`) && PathPrefix(`/`)
+      entrypoints:
+      - websecure
+      tls:
+        certresolver: myresolver
+      middlewares:
+      - authentik_sysmgr
+
+  services:
+    # Define how to reach an existing service on our infrastructure
+    kateryna-jd:
+      loadBalancer:
+        servers:
+        - url: http://192.168.222.83:80
diff --git a/_traefik/dynamic/_templates/runtipi-apps.yml.sz b/_traefik/dynamic/_templates/runtipi-apps.yml.sz
new file mode 100644
index 0000000..13c7649
--- /dev/null
+++ b/_traefik/dynamic/_templates/runtipi-apps.yml.sz
@@ -0,0 +1,37 @@
+http:
+  routers:
+    # code-server:
+    #   middlewares:
+    #   - authentik_sysmgr@file
+    # sonarr:
+    #   middlewares:
+    #   - authentik_sysmgr@file
+
+    forgejo-more:
+      service: forgejo@docker
+      rule: Host(`code.lksz.me`)
+      entrypoints:
+      - websecure
+      tls:
+        certresolver: myresolver
+
+    traefik-dashboard:
+      service: dashboard@internal
+      rule: Host(`tfk.szk.li`) && PathPrefix(`/`)
+      entrypoints:
+      - websecure
+      tls:
+        certresolver: myresolver
+      middlewares:
+      - authentik_sysmgr@file
+      - dashboard_redirect@internal
+
+    traefik-api:
+      service: api@internal
+      rule: Host(`tfk.szk.li`) && PathPrefix(`/api`)
+      entrypoints:
+      - websecure
+      tls:
+        certresolver: myresolver
+      middlewares:
+      - authentik_sysmgr@file
\ No newline at end of file