Traefik documentation

[leadvic]

It would be awesome to have more documentation about different reverse proxy, I'd love to see some related to a traefik configuration as a reverse proxy

[lastsamurai26]

Hey,

I will look at this, do you already have an idea ?

[leadvic]

Not really,
I was trying to deploy the littlelink-custom image on my home server using traefik but it didn't work properly and I couldn't find much information about what I thought about this issue.

I'll tell you what I tried and how it didn't work, hope it works for you somehow...

Considering my traefik configuration as follow:

version: "3"
services:
  traefik:
    image: traefik:v3.0
    container_name: traefik
    restart: unless-stopped
    command:
      # Tell Traefik to discover containers using the Docker API
      - --providers.docker=true
      # Enable the Trafik dashboard
      - --api.dashboard=true
      # Set up LetsEncrypt
      - --certificatesresolvers.letsencrypt.acme.dnschallenge=true
      - --certificatesresolvers.letsencrypt.acme.dnschallenge.provider=cloudflare
      - --certificatesresolvers.letsencrypt.acme.email=example@email.com
      - --certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json
      # Set up an insecure listener that redirects all traffic to TLS
      - --entrypoints.web.address=:80
      - --entrypoints.web.http.redirections.entrypoint.to=websecure
      - --entrypoints.web.http.redirections.entrypoint.scheme=https
      - --entrypoints.websecure.address=:443
      # Set up the TLS configuration for our websecure listener
      - --entrypoints.websecure.http.tls=true
      - --entrypoints.websecure.http.tls.certResolver=letsencrypt
      - --entrypoints.websecure.http.tls.domains[0].main=custom.domain
      - --entrypoints.websecure.http.tls.domains[0].sans=*.custom.domain
    environment:
      - CLOUDFLARE_EMAIL=example@email.com
      - CLOUDFLARE_DNS_API_TOKEN=thisisareallylongtokenitookfromcloudflareapi
    ports:
      - 80:80
      - 443:443
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - certs:/letsencrypt
    labels:
      - "traefik.enable=true"
      - 'traefik.http.routers.traefik.rule=Host(`traefik.custom.domain`)'
      - "traefik.http.routers.traefik.entrypoints=websecure"
      - "traefik.http.routers.traefik.tls.certresolver=letsencrypt"
      - "traefik.http.routers.traefik.service=api@internal"
      - 'traefik.http.routers.traefik.middlewares=strip'
      - 'traefik.http.middlewares.strip.stripprefix.prefixes=/traefik'
volumes:
  certs:

Then, it worked well with the dashboard of traefik and a WordPress instance I had. But when I tried following the same labels with littlelink-custom it didn't work properly. The following labels were the ones I used:

labels:
- traefik.enable=true
- traefik.http.routers.littlelink_custom.entrypoints=websecure
- traefik.http.routers.littlelink_custom.rule=Host(`link.custom.domain`)
- traefik.http.routers.littlelink_custom.tls.certresolver=letsencrypt

With the labels above it worked somehow, but poorly, with no security and a lot of problems I guess related to the configuration of the HTTP/HTTPS or the ports 80/443. Not sure.

So I tried changing the port to 443

labels:
- traefik.enable=true
- traefik.http.routers.littlelink_custom.entrypoints=websecure
- traefik.http.routers.littlelink_custom.rule=Host(`link.custom.domain`)
- traefik.http.routers.littlelink_custom.tls.certresolver=letsencrypt
- traefik.http.services.my-service.loadbalancer.server.port=443

But it didn't work at all, it was worst so I'm not sure why this is happening, but it only happens with this image particularly.

[lastsamurai26]

what error message do you get when you get it with port 443 or 80 ?
have you ever tried with a TCP route ?

[leadvic]

Sorry my late response. When I use "traefik.http.services.my-service.loadbalancer.server.port=443" i got a "404 page not found" and when I don't define the port or use the port 80 it works, it shows me the service but when I choose the database I want I got an error of "You are about to send unsecured information. An unsecured connection is being used to submit this form, so other users will be able to see your information." So it's an issue related to littlelink-custom and traefik are not configured properly to work together with security.

[lastsamurai26]

maybe try this to add to your config
- "traefik.http.services.littlelink_custom.loadbalancer.server.port=443"
- "traefik.http.services.littlelink_custom.loadbalancer.server.scheme=https"

[leadvic]

When doing that I got in my browser the following:
"Internal Server Error"

I wanted to ask you, I could make it work properly using nginx proxy manager, would it be useful to show you that configuration? to see if we could translate it to traefik?

[lastsamurai26]

Sure you can

i tried it again with the following config
- "traefik.enable=true"
- "traefik.http.routers.llc-rtr.rule=Host(domain.de)"
- "traefik.http.routers.llc-rtr.entrypoints=https"
- "traefik.http.routers.llc-rtr.tls=true"
- "traefik.http.routers.llc-rtr.tls.certresolver=le"
- "traefik.http.routers.llc-rtr.middlewares=default@file,passtls@file"
- "traefik.docker.network=traefik_web"

[DrMxrcy]

Was anyone able to get traefik working?