diff --git a/traefik/docker-compose.yml b/traefik/docker-compose.yml
index 860ed0b..f7acc05 100755
--- a/traefik/docker-compose.yml
+++ b/traefik/docker-compose.yml
@@ -18,6 +18,8 @@ services:
     volumes:
       - "/var/run/docker.sock:/var/run/docker.sock:ro"
       - "./acme.json:/acme.json"
+      - "./dynamic:/etc/traefik/dynamic"
+      - "./certs:/certs"
     ports:
       - "80:80"
       - "443:443"
@@ -33,6 +35,7 @@ services:
       - "--entrypoints.web.address=:80"
       - "--entrypoints.web.http.redirections.entryPoint.to=websecure"
       - "--entrypoints.websecure.address=:443"
+      - "--providers.file.directory=/etc/traefik/dynamic"
 
       # Let's Encrypt
       - "--certificatesresolvers.le.acme.email=${CF_API_EMAIL}"
diff --git a/traefik/dynamic/cert-neteasemusic.yml b/traefik/dynamic/cert-neteasemusic.yml
new file mode 100644
index 0000000..cfe1db3
--- /dev/null
+++ b/traefik/dynamic/cert-neteasemusic.yml
@@ -0,0 +1,4 @@
+tls:
+  certificates:
+    - certFile: /certs/neteasemusic.crt
+      keyFile: /certs/neteasemusic.key
diff --git a/traefik/dynamic/neteasemusic.yml b/traefik/dynamic/neteasemusic.yml
new file mode 100644
index 0000000..9aa208d
--- /dev/null
+++ b/traefik/dynamic/neteasemusic.yml
@@ -0,0 +1,18 @@
+http:
+  routers:
+    neteasemusic:
+      rule: "Host(`music.163.com`)"
+      tls: {}
+      middlewares: unblockNeteaseMusic
+      service: neteasemusic
+  services:
+    neteasemusic:
+      loadBalancer:
+        servers:
+          - url: "https://music.163.com"
+  middlewares:
+    unblockNeteaseMusic:
+      headers:
+        customRequestHeaders:
+          X-Real-IP: "1.1.0.0"
+          X-Forwarded-For: "1.1.0.0"