diff --git a/gate-traefik/templates/etc/traefik/traefik.yaml b/gate-traefik/templates/etc/traefik/traefik.yaml
index ade73e2..28323ce 100644
--- a/gate-traefik/templates/etc/traefik/traefik.yaml
+++ b/gate-traefik/templates/etc/traefik/traefik.yaml
@@ -22,6 +22,8 @@ entryPoints:
     address: ':51820/udp'
   wireguard2:
     address: ':51821/udp'
+  shadow:
+    address: ':5555'
   http:
     address: ':80'
     http:
diff --git a/shadow/traefik.yml b/shadow/traefik.yml
new file mode 100644
index 0000000..441f1c2
--- /dev/null
+++ b/shadow/traefik.yml
@@ -0,0 +1,13 @@
+tcp:
+  routers:
+    ${CTHOSTNAME}:
+      entryPoints:
+        - ${CTHOSTNAME}
+      service: ${CTHOSTNAME}
+      rule: "HostSNI(`*`)"
+
+  services:
+    ${CTHOSTNAME}:
+      loadBalancer:
+        servers:
+          - address: ${CTHOSTNAME}.srv:5555
diff --git a/wireguard/traefik.yml b/wireguard/traefik.yml
index 1823c6c..b46c7a3 100644
--- a/wireguard/traefik.yml
+++ b/wireguard/traefik.yml
@@ -2,7 +2,7 @@ udp:
   routers:
     ${CTHOSTNAME}:
       entryPoints:
-        - wireguard2
+        - wireguard
       service: ${CTHOSTNAME}
 
   services: