diff --git a/docker-compose.yml b/docker-compose.yml
index 97e4c83..c3f39da 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -47,14 +47,13 @@ services:
       - ICECAST_PASSWORD=Bk3H7UM8
       - ICECAST_RELAY_PASSWORD=hackme
     labels:
-      - traefik.enable=true
-      - traefik.frontend.rule=Host:icecast.radio.dodsorf.as
-      - traefik.port=8000
-      - traefik.backend=icecast
-      - traefik.domain=dodsorf.as
-      - traefik.docker.network=reverse
-      - traefik.frontend.headers.SSLRedirect=true
-      - traefik.frontend.entryPoints=http,https
+      - "traefik.enable=true"
+      - "traefik.http.routers.radio-iceast-http.rule="Host('iceast.radio.dodsorf.as')"
+      - "traefik.http.services.radio-icecast.loadbalancer.server.port=8000"
+      - "traefik.http.routers.radio-icecast-http.middlewares=redirect@file"
+      - "traefik.http.routers.radio-icecast-http.entrypoints=web"
+      - "traefik.http.routers.radio-icecast-https.entrypoints=websecure"
+      - "traefik.http.routers.radio-icecast-https.tls.certresolver=normal"
     networks:
       - reverse
       - default
@@ -68,14 +67,13 @@ services:
     volumes:
     - ./state/playlists:/playlists
     labels:
-    - traefik.enable=true
-    - traefik.frontend.rule=Host:radio.dodsorf.as
-    - traefik.port=80
-    - traefik.backend=webradio
-    - traefik.domain=dodsorf.as
-    - traefik.docker.network=reverse
-    - traefik.frontend.headers.SSLRedirect=true
-    - traefik.frontend.entryPoints=http,https
+    - "traefik.enable=true"
+    - "traefik.http.routers.radio-web-http.rule="Host('radio.dodsorf.as')"
+    - "traefik.http.services.radio-web.loadbalancer.server.port=80"
+    - "traefik.http.routers.radio-web-http.middlewares=redirect@file"
+    - "traefik.http.routers.radio-web-http.entrypoints=web"
+    - "traefik.http.routers.radio-web-https.entrypoints=websecure"
+    - "traefik.http.routers.radio-web-https.tls.certresolver=normal"
     networks:
     - reverse
     - default