diff --git a/dynamic/services.yaml b/dynamic/services.yaml
index e29d05c..3334813 100644
--- a/dynamic/services.yaml
+++ b/dynamic/services.yaml
@@ -1,3 +1,35 @@
+# ----------------------
+# EntryPoints
+# ----------------------
+entryPoints:
+  web:
+    address: ":80"
+  websecure:
+    address: ":443"
+  ssh:
+    address: ":22"
+
+# ----------------------
+# TCP (SSH) Routers
+# ----------------------
+tcp:
+  routers:
+    gitea-ssh:
+      entryPoints:
+        - ssh
+      service: gitea-ssh
+      rule: "HostSNI(`*`)"  # SSH does not use SNI
+      tls: false
+
+  services:
+    gitea-ssh:
+      loadBalancer:
+        servers:
+          - address: "private-pi:222"
+
+# ----------------------
+# HTTP Routers & Middlewares
+# ----------------------
 http:
   middlewares:
     basic-auth:
@@ -280,6 +312,9 @@ http:
       tls:
         certResolver: aetoskia
 
+# ----------------------
+# HTTP Services
+# ----------------------
   services:
     # Landing Page
     www-svc: