diff --git a/hosting/envoy.yaml b/hosting/envoy.yaml
index a670c4f2bb..d9f8384688 100644
--- a/hosting/envoy.yaml
+++ b/hosting/envoy.yaml
@@ -1,151 +1,152 @@
 static_resources:
   listeners:
-    - name: main_listener
-      address:
-        socket_address: { address: 0.0.0.0, port_value: 10000 }
-      filter_chains:
-        - filters:
-            - name: envoy.filters.network.http_connection_manager
-              typed_config:
-                "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
-                stat_prefix: ingress
-                codec_type: auto
-                route_config:
-                  name: local_route
-                  virtual_hosts:
-                    - name: local_services
-                      domains: ["*"]
-                      routes:
-                        - match: { prefix: "/app/" }
-                          route:
-                            cluster: app-service
-                            prefix_rewrite: "/"
+  - name: main_listener
+    address:
+      socket_address: { address: 0.0.0.0, port_value: 10000 }
+    filter_chains:
+    - filters:
+      - name: envoy.filters.network.http_connection_manager
+        typed_config:
+          "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
+          stat_prefix: ingress
+          codec_type: auto
+          route_config:
+            name: local_route
+            virtual_hosts:
+            - name: local_services
+              domains: ["*"]
+              routes:
+              - match: { prefix: "/app/" }
+                route:
+                  cluster: app-service
+                  prefix_rewrite: "/"
 
-                        - match: { path: "/v1/update" }
-                          route:
-                            cluster: watchtower-service
+              - match: { path: "/v1/update" }
+                route:
+                  cluster: watchtower-service
 
-                        - match: { prefix: "/builder/" }
-                          route:
-                            cluster: app-service
+              - match: { prefix: "/builder/" }
+                route:
+                  cluster: app-service
 
-                        - match: { prefix: "/builder" }
-                          route:
-                            cluster: app-service
+              - match: { prefix: "/builder" }
+                route:
+                  cluster: app-service
+              
+              - match: { prefix: "/app_" }
+                route:
+                  cluster: app-service
 
-                        - match: { prefix: "/app_" }
-                          route:
-                            cluster: app-service
+              # special cases for worker admin (deprecated), global and system API
+              - match: { prefix: "/api/global/" }
+                route:
+                  cluster: worker-service
 
-                        # special cases for worker admin (deprecated), global and system API
-                        - match: { prefix: "/api/global/" }
-                          route:
-                            cluster: worker-service
+              - match: { prefix: "/api/admin/" }
+                route:
+                  cluster: worker-service
 
-                        - match: { prefix: "/api/admin/" }
-                          route:
-                            cluster: worker-service
+              - match: { prefix: "/api/system/" }
+                route:
+                  cluster: worker-service
 
-                        - match: { prefix: "/api/system/" }
-                          route:
-                            cluster: worker-service
+              - match: { path: "/" }
+                route:
+                  cluster: app-service
 
-                        - match: { path: "/" }
-                          route:
-                            cluster: app-service
+              # special case for when API requests are made, can just forward, not to minio    
+              - match: { prefix: "/api/" }
+                route:
+                  cluster: app-service
+                  timeout: 120s
 
-                        # special case for when API requests are made, can just forward, not to minio
-                        - match: { prefix: "/api/" }
-                          route:
-                            cluster: app-service
-                            timeout: 120s
+              - match: { prefix: "/worker/" }
+                route: 
+                  cluster: worker-service
+                  prefix_rewrite: "/"
 
-                        - match: { prefix: "/worker/" }
-                          route:
-                            cluster: worker-service
-                            prefix_rewrite: "/"
+              - match: { prefix: "/db/" }
+                route:
+                  cluster: couchdb-service
+                  prefix_rewrite: "/"
 
-                        - match: { prefix: "/db/" }
-                          route:
-                            cluster: couchdb-service
-                            prefix_rewrite: "/"
+              # minio is on the default route because this works
+              # best, minio + AWS SDK doesn't handle path proxy
+              - match: { prefix: "/" }
+                route:
+                  cluster: minio-service
 
-                        # minio is on the default route because this works
-                        # best, minio + AWS SDK doesn't handle path proxy
-                        - match: { prefix: "/" }
-                          route:
-                            cluster: minio-service
-
-                http_filters:
-                  - name: envoy.filters.http.router
+          http_filters:
+          - name: envoy.filters.http.router
 
   clusters:
-    - name: app-service
-      connect_timeout: 0.25s
-      type: strict_dns
-      lb_policy: round_robin
-      load_assignment:
-        cluster_name: app-service
-        endpoints:
-          - lb_endpoints:
-              - endpoint:
-                  address:
-                    socket_address:
-                      address: app-service
-                      port_value: 4002
+  - name: app-service
+    connect_timeout: 0.25s
+    type: strict_dns
+    lb_policy: round_robin
+    load_assignment:
+      cluster_name: app-service
+      endpoints:
+      - lb_endpoints:
+        - endpoint:
+            address:
+              socket_address: 
+                address: app-service
+                port_value: 4002
 
-    - name: minio-service
-      connect_timeout: 0.25s
-      type: strict_dns
-      lb_policy: round_robin
-      load_assignment:
-        cluster_name: minio-service
-        endpoints:
-          - lb_endpoints:
-              - endpoint:
-                  address:
-                    socket_address:
-                      address: minio-service
-                      port_value: 9000
+  - name: minio-service
+    connect_timeout: 0.25s
+    type: strict_dns
+    lb_policy: round_robin
+    load_assignment:
+      cluster_name: minio-service
+      endpoints:
+      - lb_endpoints:
+        - endpoint:
+            address:
+              socket_address:
+                address: minio-service
+                port_value: 9000
 
-    - name: worker-service
-      connect_timeout: 0.25s
-      type: strict_dns
-      lb_policy: round_robin
-      load_assignment:
-        cluster_name: worker-service
-        endpoints:
-          - lb_endpoints:
-              - endpoint:
-                  address:
-                    socket_address:
-                      address: worker-service
-                      port_value: 4003
+  - name: worker-service
+    connect_timeout: 0.25s
+    type: strict_dns
+    lb_policy: round_robin
+    load_assignment:
+      cluster_name: worker-service
+      endpoints:
+      - lb_endpoints:
+        - endpoint:
+            address:
+              socket_address: 
+                address: worker-service
+                port_value: 4003
 
-    - name: couchdb-service
-      connect_timeout: 0.25s
-      type: strict_dns
-      lb_policy: round_robin
-      load_assignment:
-        cluster_name: couchdb-service
-        endpoints:
-          - lb_endpoints:
-              - endpoint:
-                  address:
-                    socket_address:
-                      address: couchdb-service
-                      port_value: 5984
+  - name: couchdb-service
+    connect_timeout: 0.25s
+    type: strict_dns
+    lb_policy: round_robin
+    load_assignment:
+      cluster_name: couchdb-service
+      endpoints:
+      - lb_endpoints:
+        - endpoint:
+            address:
+              socket_address:
+                address: couchdb-service
+                port_value: 5984
+
+  - name: watchtower-service
+    connect_timeout: 0.25s
+    type: strict_dns
+    lb_policy: round_robin
+    load_assignment:
+      cluster_name: watchtower-service
+      endpoints:
+      - lb_endpoints:
+        - endpoint:
+            address:
+              socket_address: 
+                address: watchtower-service
+                port_value: 8080
 
-    - name: watchtower-service
-      connect_timeout: 0.25s
-      type: strict_dns
-      lb_policy: round_robin
-      load_assignment:
-        cluster_name: watchtower-service
-        endpoints:
-          - lb_endpoints:
-              - endpoint:
-                  address:
-                    socket_address:
-                      address: watchtower-service
-                      port_value: 8080