diff --git a/ethereum/geth/ethereum-holesky-geth-pruned-pebble-path.yml b/ethereum/geth/ethereum-holesky-geth-pruned-pebble-path.yml
index eb92744d..2e936e30 100644
--- a/ethereum/geth/ethereum-holesky-geth-pruned-pebble-path.yml
+++ b/ethereum/geth/ethereum-holesky-geth-pruned-pebble-path.yml
@@ -91,6 +91,15 @@ services:
     volumes:
       - ${ETHEREUM_HOLESKY_GETH_PRUNED_PEBBLE_PATH__PRYSM_DATA:-ethereum-holesky-geth-pruned-pebble-path_prysm}:/data
       - .jwtsecret:/jwtsecret:ro
+    labels:
+      - traefik.enable=true
+      - traefik.http.middlewares.ethereum-holesky-geth-pruned-pebble-path-node-stripprefix.stripprefix.prefixes=/ethereum-holesky
+      - traefik.http.services.ethereum-holesky-geth-pruned-pebble-path-node.loadbalancer.server.port=3500
+      - ${NO_SSL:-traefik.http.routers.ethereum-holesky-geth-pruned-pebble-path-node.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.ethereum-holesky-geth-pruned-pebble-path-node.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.ethereum-holesky-geth-pruned-pebble-path-node.rule=Host(`$DOMAIN`) && PathPrefix(`/ethereum-holesky/eth`)}
+      - ${NO_SSL:+traefik.http.routers.ethereum-holesky-geth-pruned-pebble-path-node.rule=PathPrefix(`/ethereum-holesky/eth`)}
+      - traefik.http.routers.ethereum-holesky-geth-pruned-pebble-path-node.middlewares=ethereum-holesky-geth-pruned-pebble-path-node-stripprefix, ipwhitelist
 
 volumes:
   ethereum-holesky-geth-pruned-pebble-path:
diff --git a/ethereum/geth/ethereum-mainnet-geth-pruned-pebble-path.yml b/ethereum/geth/ethereum-mainnet-geth-pruned-pebble-path.yml
index 68b7356f..4ac96855 100644
--- a/ethereum/geth/ethereum-mainnet-geth-pruned-pebble-path.yml
+++ b/ethereum/geth/ethereum-mainnet-geth-pruned-pebble-path.yml
@@ -91,6 +91,15 @@ services:
     volumes:
       - ${ETHEREUM_MAINNET_GETH_PRUNED_PEBBLE_PATH__PRYSM_DATA:-ethereum-mainnet-geth-pruned-pebble-path_prysm}:/data
       - .jwtsecret:/jwtsecret:ro
+    labels:
+      - traefik.enable=true
+      - traefik.http.middlewares.ethereum-mainnet-geth-pruned-pebble-path-node-stripprefix.stripprefix.prefixes=/ethereum-mainnet
+      - traefik.http.services.ethereum-mainnet-geth-pruned-pebble-path-node.loadbalancer.server.port=3500
+      - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-geth-pruned-pebble-path-node.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-geth-pruned-pebble-path-node.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-geth-pruned-pebble-path-node.rule=Host(`$DOMAIN`) && PathPrefix(`/ethereum-mainnet/eth`)}
+      - ${NO_SSL:+traefik.http.routers.ethereum-mainnet-geth-pruned-pebble-path-node.rule=PathPrefix(`/ethereum-mainnet/eth`)}
+      - traefik.http.routers.ethereum-mainnet-geth-pruned-pebble-path-node.middlewares=ethereum-mainnet-geth-pruned-pebble-path-node-stripprefix, ipwhitelist
 
 volumes:
   ethereum-mainnet-geth-pruned-pebble-path:
diff --git a/ethereum/geth/ethereum-sepolia-geth-pruned-pebble-path.yml b/ethereum/geth/ethereum-sepolia-geth-pruned-pebble-path.yml
index d12b2157..a1b50b82 100644
--- a/ethereum/geth/ethereum-sepolia-geth-pruned-pebble-path.yml
+++ b/ethereum/geth/ethereum-sepolia-geth-pruned-pebble-path.yml
@@ -91,6 +91,15 @@ services:
     volumes:
       - ${ETHEREUM_SEPOLIA_GETH_PRUNED_PEBBLE_PATH__PRYSM_DATA:-ethereum-sepolia-geth-pruned-pebble-path_prysm}:/data
       - .jwtsecret:/jwtsecret:ro
+    labels:
+      - traefik.enable=true
+      - traefik.http.middlewares.ethereum-sepolia-geth-pruned-pebble-path-node-stripprefix.stripprefix.prefixes=/ethereum-sepolia
+      - traefik.http.services.ethereum-sepolia-geth-pruned-pebble-path-node.loadbalancer.server.port=3500
+      - ${NO_SSL:-traefik.http.routers.ethereum-sepolia-geth-pruned-pebble-path-node.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.ethereum-sepolia-geth-pruned-pebble-path-node.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.ethereum-sepolia-geth-pruned-pebble-path-node.rule=Host(`$DOMAIN`) && PathPrefix(`/ethereum-sepolia/eth`)}
+      - ${NO_SSL:+traefik.http.routers.ethereum-sepolia-geth-pruned-pebble-path-node.rule=PathPrefix(`/ethereum-sepolia/eth`)}
+      - traefik.http.routers.ethereum-sepolia-geth-pruned-pebble-path-node.middlewares=ethereum-sepolia-geth-pruned-pebble-path-node-stripprefix, ipwhitelist
 
 volumes:
   ethereum-sepolia-geth-pruned-pebble-path:
diff --git a/ethereum/reth/ethereum-holesky-reth-archive-trace.yml b/ethereum/reth/ethereum-holesky-reth-archive-trace.yml
index 4898fa82..4d9c014b 100644
--- a/ethereum/reth/ethereum-holesky-reth-archive-trace.yml
+++ b/ethereum/reth/ethereum-holesky-reth-archive-trace.yml
@@ -89,6 +89,15 @@ services:
     volumes:
       - ${ETHEREUM_HOLESKY_RETH_ARCHIVE_TRACE__PRYSM_DATA:-ethereum-holesky-reth-archive-trace_prysm}:/data
       - .jwtsecret:/jwtsecret:ro
+    labels:
+      - traefik.enable=true
+      - traefik.http.middlewares.ethereum-holesky-reth-archive-trace-node-stripprefix.stripprefix.prefixes=/ethereum-holesky-archive
+      - traefik.http.services.ethereum-holesky-reth-archive-trace-node.loadbalancer.server.port=3500
+      - ${NO_SSL:-traefik.http.routers.ethereum-holesky-reth-archive-trace-node.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.ethereum-holesky-reth-archive-trace-node.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.ethereum-holesky-reth-archive-trace-node.rule=Host(`$DOMAIN`) && PathPrefix(`/ethereum-holesky-archive/eth`)}
+      - ${NO_SSL:+traefik.http.routers.ethereum-holesky-reth-archive-trace-node.rule=PathPrefix(`/ethereum-holesky-archive/eth`)}
+      - traefik.http.routers.ethereum-holesky-reth-archive-trace-node.middlewares=ethereum-holesky-reth-archive-trace-node-stripprefix, ipwhitelist
 
 volumes:
   ethereum-holesky-reth-archive-trace:
diff --git a/ethereum/reth/ethereum-mainnet-reth-archive-trace.yml b/ethereum/reth/ethereum-mainnet-reth-archive-trace.yml
index 7fa0e4bb..49efe4d5 100644
--- a/ethereum/reth/ethereum-mainnet-reth-archive-trace.yml
+++ b/ethereum/reth/ethereum-mainnet-reth-archive-trace.yml
@@ -89,6 +89,15 @@ services:
     volumes:
       - ${ETHEREUM_MAINNET_RETH_ARCHIVE_TRACE__PRYSM_DATA:-ethereum-mainnet-reth-archive-trace_prysm}:/data
       - .jwtsecret:/jwtsecret:ro
+    labels:
+      - traefik.enable=true
+      - traefik.http.middlewares.ethereum-mainnet-reth-archive-trace-node-stripprefix.stripprefix.prefixes=/ethereum-mainnet-archive
+      - traefik.http.services.ethereum-mainnet-reth-archive-trace-node.loadbalancer.server.port=3500
+      - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-reth-archive-trace-node.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-reth-archive-trace-node.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.ethereum-mainnet-reth-archive-trace-node.rule=Host(`$DOMAIN`) && PathPrefix(`/ethereum-mainnet-archive/eth`)}
+      - ${NO_SSL:+traefik.http.routers.ethereum-mainnet-reth-archive-trace-node.rule=PathPrefix(`/ethereum-mainnet-archive/eth`)}
+      - traefik.http.routers.ethereum-mainnet-reth-archive-trace-node.middlewares=ethereum-mainnet-reth-archive-trace-node-stripprefix, ipwhitelist
 
 volumes:
   ethereum-mainnet-reth-archive-trace:
diff --git a/ethereum/reth/ethereum-sepolia-reth-archive-trace.yml b/ethereum/reth/ethereum-sepolia-reth-archive-trace.yml
index 2304bf68..6480a5c9 100644
--- a/ethereum/reth/ethereum-sepolia-reth-archive-trace.yml
+++ b/ethereum/reth/ethereum-sepolia-reth-archive-trace.yml
@@ -89,6 +89,15 @@ services:
     volumes:
       - ${ETHEREUM_SEPOLIA_RETH_ARCHIVE_TRACE__PRYSM_DATA:-ethereum-sepolia-reth-archive-trace_prysm}:/data
       - .jwtsecret:/jwtsecret:ro
+    labels:
+      - traefik.enable=true
+      - traefik.http.middlewares.ethereum-sepolia-reth-archive-trace-node-stripprefix.stripprefix.prefixes=/ethereum-sepolia-archive
+      - traefik.http.services.ethereum-sepolia-reth-archive-trace-node.loadbalancer.server.port=3500
+      - ${NO_SSL:-traefik.http.routers.ethereum-sepolia-reth-archive-trace-node.entrypoints=websecure}
+      - ${NO_SSL:-traefik.http.routers.ethereum-sepolia-reth-archive-trace-node.tls.certresolver=myresolver}
+      - ${NO_SSL:-traefik.http.routers.ethereum-sepolia-reth-archive-trace-node.rule=Host(`$DOMAIN`) && PathPrefix(`/ethereum-sepolia-archive/eth`)}
+      - ${NO_SSL:+traefik.http.routers.ethereum-sepolia-reth-archive-trace-node.rule=PathPrefix(`/ethereum-sepolia-archive/eth`)}
+      - traefik.http.routers.ethereum-sepolia-reth-archive-trace-node.middlewares=ethereum-sepolia-reth-archive-trace-node-stripprefix, ipwhitelist
 
 volumes:
   ethereum-sepolia-reth-archive-trace:
diff --git a/upstreams.sh b/upstreams.sh
index 23b1a638..65968dc2 100755
--- a/upstreams.sh
+++ b/upstreams.sh
@@ -38,7 +38,7 @@ for part in "${parts[@]}"; do
     if $include; then
 
 	#pathlist=$(cat $BASEPATH/$part | grep -oP "(?<=stripprefix\.prefixes).*\"" | cut -d'=' -f2- | sed 's/.$//')
-        pathlist=$(cat $BASEPATH/$part | grep -oP "stripprefix\.prefixes.*?/\K[^\"]+")
+    pathlist=$(cat $BASEPATH/$part | grep -oP "stripprefix\.prefixes.*?/\K[^\"]+")
 
 	for path in $pathlist; do
 	    path_include=true