diff --git a/stack.production.yml b/stack.production.yml
index 63730cb..f3dfbc9 100644
--- a/stack.production.yml
+++ b/stack.production.yml
@@ -22,6 +22,17 @@ services:
         parallelism: 1
         delay: 10s
         order: stop-first
+      labels:
+        - traefik.enable=true
+        - traefik.http.routers.production_easy-appointments.rule=Host(`cal.colinknapp.com`)
+        - traefik.http.routers.production_easy-appointments.entrypoints=websecure
+        - traefik.http.routers.production_easy-appointments.tls=true
+        - traefik.http.routers.production_easy-appointments.tls.certresolver=letsencryptresolver
+        - traefik.http.services.production_easy-appointments.loadbalancer.server.port=80
+        # - traefik.http.services.production_easy-appointments.loadbalancer.healthcheck.path=/health
+        # - traefik.http.services.production_easy-appointments.loadbalancer.healthcheck.interval=30s
+        # - traefik.http.services.production_easy-appointments.loadbalancer.healthcheck.timeout=5s
+        - traefik.http.routers.production_easy-appointments.middlewares=secure-headers
     environment:
       BASE_URL: "https://cal.colinknapp.com"
       DEBUG_MODE: "TRUE"
@@ -32,17 +43,6 @@ services:
     networks:
       - traefik
       - default
-    labels:
-      - traefik.enable=true
-      - traefik.http.routers.production_easy-appointments.rule=Host(`cal.colinknapp.com`)
-      - traefik.http.routers.production_easy-appointments.entrypoints=websecure
-      - traefik.http.routers.production_easy-appointments.tls=true
-      - traefik.http.routers.production_easy-appointments.tls.certresolver=letsencryptresolver
-      - traefik.http.services.production_easy-appointments.loadbalancer.server.port=80
-      # - traefik.http.services.production_easy-appointments.loadbalancer.healthcheck.path=/health
-      # - traefik.http.services.production_easy-appointments.loadbalancer.healthcheck.interval=30s
-      # - traefik.http.services.production_easy-appointments.loadbalancer.healthcheck.timeout=5s
-      - traefik.http.routers.production_easy-appointments.middlewares=secure-headers
     logging:
       driver: "json-file"
       options:
diff --git a/stack.staging.yml b/stack.staging.yml
index 6d68fe4..36cc5c7 100644
--- a/stack.staging.yml
+++ b/stack.staging.yml
@@ -22,6 +22,13 @@ services:
         parallelism: 1
         delay: 10s
         order: stop-first
+      labels:
+        - traefik.enable=true
+        - traefik.http.routers.staging_easy-appointments.rule=Host(`staging.cal.colinknapp.com`)
+        - traefik.http.routers.staging_easy-appointments.entrypoints=websecure
+        - traefik.http.routers.staging_easy-appointments.tls=true
+        - traefik.http.routers.staging_easy-appointments.tls.certresolver=letsencryptresolver
+        - traefik.http.services.staging_easy-appointments.loadbalancer.server.port=80
     environment:
       BASE_URL: "https://staging.cal.colinknapp.com"
       DEBUG_MODE: "FALSE"
@@ -32,13 +39,6 @@ services:
     networks:
       - traefik
       - default
-    labels:
-      - traefik.enable=true
-      - traefik.http.routers.staging_easy-appointments.rule=Host(`staging.cal.colinknapp.com`)
-      - traefik.http.routers.staging_easy-appointments.entrypoints=websecure
-      - traefik.http.routers.staging_easy-appointments.tls=true
-      - traefik.http.routers.staging_easy-appointments.tls.certresolver=letsencryptresolver
-      - traefik.http.services.staging_easy-appointments.loadbalancer.server.port=80
 
   mariadb:
     image: git.nixc.us/colin/easy-appointments:staging-mariadb