Traefik reverse proxy, load balancer and certificate manager.
- HTTP to HTTPS redirect (Port 80/tcp to 443/tcp)
- Basic authentication for Traefik dashboard
- File provider for static routes via configuration files
- Docker provider for dynamic routes via Docker labels
- Forward IP headers if Traefik is behind a reverse proxy
- Middleware for security headers (HSTS, etc.)
- Letsencrypt certificate resolver with http challenge
- Letsencrypt certificate resolver with dns challenge
- Letsencrypt wildcard certificate (requires dns challenge)
-
DNS
A
orCNAME
record pointing to your server for the traefik web interfaceExample:
# A record treafik.borntoberoot.net --> 192.168.178.10 # CNAME record traefik.borntoberoot.net --> server01.borntoberoot.net
-
Create a docker network for Traefik (used by other stacks/containers):
docker network create --driver=bridge --attachable --internal=false traefik_proxy
-
Adjust the configuration based on your needs in the following files:
/opt/container/stacks/traefik/docker-compose.yml
/opt/container/stacks/traefik/.env
-
Start the stack with
docker compose up -d