Use Traefik to proxy Edge agent traffic on :8000 to portainer #25
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,61 @@ | ||
| version: "3.3" | ||
|
|
||
| services: | ||
| traefik: | ||
| container_name: traefik | ||
| image: "traefik:v2.3" | ||
| command: | ||
| - --entrypoints.web.address=:80 | ||
| - --entrypoints.websecure.address=:443 | ||
| - --entrypoints.edgeagent.address=:8000 | ||
| - --providers.docker | ||
| - --log.level=DEBUG | ||
| - --certificatesresolvers.leresolver.acme.httpchallenge=true | ||
| - --certificatesresolvers.leresolver.acme.email=your-email #Set your email address here, is for the generation of SSL certificates with Let's Encrypt. | ||
| - --certificatesresolvers.leresolver.acme.storage=./acme.json | ||
| - --certificatesresolvers.leresolver.acme.httpchallenge.entrypoint=web | ||
| ports: | ||
| - "80:80" | ||
| - "443:443" | ||
| - "8000:8000" | ||
| volumes: | ||
| - "/var/run/docker.sock:/var/run/docker.sock:ro" | ||
| - "./acme.json:/acme.json" | ||
| labels: | ||
| - "traefik.http.routers.http-catchall.rule=hostregexp(`{host:.+}`)" | ||
| - "traefik.http.routers.http-catchall.entrypoints=web" | ||
| - "traefik.http.routers.http-catchall.middlewares=redirect-to-https" | ||
| - "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https" | ||
|
|
||
| portainer: | ||
| image: portainer/portainer-ce:2.0.0 | ||
| command: -H unix:///var/run/docker.sock | ||
| restart: always | ||
| volumes: | ||
| - /var/run/docker.sock:/var/run/docker.sock | ||
| - portainer_data:/data | ||
| labels: | ||
| # Frontend | ||
| - "traefik.enable=true" | ||
| - "traefik.http.routers.frontend.rule=Host(`portainer.yourdomain.com`)" | ||
| - "traefik.http.routers.frontend.entrypoints=websecure" | ||
| - "traefik.http.services.frontend.loadbalancer.server.port=9000" | ||
| - "traefik.http.routers.frontend.service=frontend" | ||
| - "traefik.http.routers.frontend.tls.certresolver=leresolver" | ||
|
|
||
| # Edge | ||
| - "traefik.http.routers.edge.rule=Host(`edge.yourdomain.com`)" | ||
| - "traefik.http.routers.edge.entrypoints=websecure" | ||
| - "traefik.http.services.edge.loadbalancer.server.port=8000" | ||
| - "traefik.http.routers.edge.service=edge" | ||
| - "traefik.http.routers.edge.tls.certresolver=leresolver" | ||
|
|
||
| # Edge agent service routed by Traefik | ||
| - "traefik.tcp.routers.edgeagent.rule=Host(`edge.yourdomain.com`)" | ||
|
There was a problem hiding this comment. Host rule should be changed to HostSNI otherwise traefik throws an error about "unknown rule". |
||
| - "traefik.tcp.routers.edgeagent.entrypoints=edgeagent" | ||
| - "traefik.tcp.services.edgeagent.loadbalancer.server.port=8000" | ||
|
|
||
|
|
||
|
|
||
| volumes: | ||
| portainer_data: | ||
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Port here should be 9000. Edge agent wants to access the api and port 8000 which is routed by the TCP router below. I had to change the https edge vhost to 9000 to be able to associate it with the portainer server. I still cannot browse the egde endpoint but at least it is associated. With the https router pointing to 8000 (the same with tcp router) the association didn't work.