diff --git a/.gitignore b/.gitignore
index c4cc9af..0ad8a25 100644
--- a/.gitignore
+++ b/.gitignore
@@ -3,3 +3,7 @@ _traefik/tls
 _traefik/shared
 **/app.env
 ddns-updater/config.json
+# This is will be a local sym-link
+*.local.yml
+*.local
+local.*
diff --git a/_traefik/dynamic/mw.fwd-auth-sysmgr.yml.shefet b/_traefik/dynamic/mw.fwd-auth-sysmgr.yml.shefet
new file mode 100644
index 0000000..c2a0f57
--- /dev/null
+++ b/_traefik/dynamic/mw.fwd-auth-sysmgr.yml.shefet
@@ -0,0 +1,19 @@
+http:
+  middlewares:
+    authentik_sysmgr:
+      forwardAuth:
+        address: https://auth.shefet.net/outpost.goauthentik.io/auth/traefik
+        trustForwardHeader: true
+        authResponseHeadersRegex: "^[Xx]-[Aa]uthentik"
+        # authResponseHeaders:
+        #   - X-authentik-username
+        #   - X-authentik-groups
+        #   - X-authentik-email
+        #   - X-authentik-name
+        #   - X-authentik-uid
+        #   - X-authentik-jwt
+        #   - X-authentik-meta-jwks
+        #   - X-authentik-meta-outpost
+        #   - X-authentik-meta-provider
+        #   - X-authentik-meta-app
+        #   - X-authentik-meta-version
\ No newline at end of file
diff --git a/_traefik/dynamic/mw.fwd-auth-sysmgr.yml b/_traefik/dynamic/mw.fwd-auth-sysmgr.yml.sz
similarity index 100%
rename from _traefik/dynamic/mw.fwd-auth-sysmgr.yml
rename to _traefik/dynamic/mw.fwd-auth-sysmgr.yml.sz
diff --git a/_traefik/dynamic/rt.ha.yml.shefet b/_traefik/dynamic/rt.ha.yml.shefet
new file mode 100644
index 0000000..a9c852b
--- /dev/null
+++ b/_traefik/dynamic/rt.ha.yml.shefet
@@ -0,0 +1,23 @@
+# http routing section
+http:
+  routers:
+    # Define a connection between requests and services
+    "to-ha":
+      rule: "Host(`ha.shefet.net`)" 
+      entrypoints:
+      - websecure
+    # # If the rule matches, applies the middleware
+    # middlewares:
+    # - test-user
+      # If the rule matches, forward to the whoami service (declared below)
+      service: home-assistant
+      tls:
+        certresolver: myresolver
+
+  services:
+    # Define how to reach an existing service on our infrastructure
+    home-assistant:
+      loadBalancer:      
+        servers:
+        - url: "http://ha.lan:8123"
+        #- address: "ha.lan:8123"
diff --git a/_traefik/dynamic/rt.ha.yml b/_traefik/dynamic/rt.ha.yml.sz
similarity index 100%
rename from _traefik/dynamic/rt.ha.yml
rename to _traefik/dynamic/rt.ha.yml.sz
diff --git a/_traefik/traefik.yml b/_traefik/traefik.yml
index a1af91f..f9c5d0e 100644
--- a/_traefik/traefik.yml
+++ b/_traefik/traefik.yml
@@ -33,7 +33,7 @@ entryPoints:
 certificatesResolvers:
   myresolver:
     acme:
-      email: acme@thisprops.com
+    # email: acme@thisprops.com
       storage: /shared/acme.json
       # httpChallenge:
       #   entryPoint: web