Redirect to https unless regex matches

I'm trying to get traefik to redirect to https unless a regex matches. For Nginx i was used to using negative lookahead, but that is not supported in Go.

I'm wondering if anyone has an example on how they got this to work?

Examples of paths that should redirect  ->  ->  ->

While these insecure should be allowed not to redirect

Of course everything should be TLS encrypted, but some legacy system have their own voodoo encryption before/after transferring data over insecure http.