Yours does not look like it's going to work because it creates a tls router but does not create a non-tls one, thus it cannot match on a plain http request. When that's fixed, there could be further impediments depending on the fix.
You need two routers. While one router can accept requests from multiple entry points, as the doco says, it cannot accept both http and https at the same time.