diff --git a/downloader.docker-compose.yml b/downloader.docker-compose.yml
index ad05521..c9cdc2f 100644
--- a/downloader.docker-compose.yml
+++ b/downloader.docker-compose.yml
@@ -38,8 +38,31 @@ services:
     networks:
       - array
     labels:
-      - "traefik.http.routers.https-0-gluetun.middlewares=gzip,authentik"
-
+labels:
+      - "traefik.enable=true"
+      
+      # 1. Create a STATIC router name (e.g., 'qbittorrent-secure')
+      #    This replaces the dynamic 'https-0-uuid' name.
+      - "traefik.http.routers.qbittorrent-secure.rule=Host(`qbittorrent.karmacoma.dev`)"
+      
+      # 2. Force High Priority
+      #    This ensures Traefik uses THIS router (with Auth) instead of 
+      #    any conflicting router Coolify might auto-generate.
+      - "traefik.http.routers.qbittorrent-secure.priority=100"
+      
+      # 3. Standard Boilerplate (Required because we are making a manual router)
+      - "traefik.http.routers.qbittorrent-secure.entrypoints=websecure"
+      - "traefik.http.routers.qbittorrent-secure.tls=true"
+      - "traefik.http.routers.qbittorrent-secure.tls.certresolver=letsencrypt"
+      
+      # 4. Attach the Middleware
+      #    Now we can reference it because we know our own router's name!
+      #    (Note: We use 'authentik@docker' to ensure we look for the middleware globally)
+      - "traefik.http.routers.qbittorrent-secure.middlewares=gzip,authentik@docker"
+      
+      # 5. Service Mapping
+      #    Tell the router to send traffic to the service port (8080 for qbit/gluetun)
+      - "traefik.http.services.qbittorrent-secure.loadbalancer.server.port=8080"
 networks:
   array:
     external: true
\ No newline at end of file