This is a perfect tutorial and speed, thanks dude. You hit the important points quickly. Too many tutorials and overviews are 30-60+ minutes. Not sure who has that kind of time to watch. Usually we’re trying to quickly solve a problem. We may not need to become an Uber infrastructure expert, but need to learn enough quickly to solve problems and know where to keep ourselves out of trouble. Thanks again!
Plenty of us have the time. 💀💀💀💀💀😂😂 The average person, unlike me nowadays, spends hours a day on social media, and builds up extra anxiety, depression, etc. 😂💀🙊🤓
The only point I don't understand is how to install Portainer with it because it seems like he has installed it before installing Traefik. And I don't know how he got this with a SSL cert and the domain working...
@@chibiichen I believe you should just add the same labels in the portainer docker compose file - obviously you will need to change the host label to point to your portainer
Cheers Christain, I have recently forced myself to build up my Home lab and your videos are absolutely amazing. I dont normally leave a comment but Traefik has been a bit of a mind melting beast so i thought I need to share my appreciation here :p
Awsome video explaining a very complex topic. Struggled for setting up traefik for some weeks, so this was what i was looking for. Alot of good info here.. Keep it up!
Hi Christian, great content,helped me a lot! About exchanging certs from staging to production - normally you don't do this, because you have separate containers for staging and production, also two different routes/domains for these service. Thanks a lot for your great job!
@@OverAndOverAndOver you actually want Nginx Proxy Manager for that - it certainly does ssl certs, custom ports, access rules, custom paths, etc. But it's advanced configs is a bit difficult.
Haha, I wish I had this video like 3 weeks ago. Took me around 3 days to fully understand how Traefik works, but it's one of the best reverse proxies I have used and fully recommend to anyone. I myself use something called Authelia, definitely not as complicated as Teleport but does provide SSO for your services on a much smaller scale Although the learning curve is high, it's well worth it. Great tutorial man, really enjoyed this one.
Compered to NPM this is a pretty complicated install but worth doing for some considering NPM has some issues. Nice work sir, one day I will take the time to learn how to do this, for now I will stick with NPM.
@@chibiichen The biggest one, which ive found out only today while trying to use it with docker swarm, is that the webUI still doesn't have support for loadbalanced upstreams. It was first submitted as a missing feature on the github 4 years ago, cited as coming with v3 which is still nowhere to be seen. As things stand, if I want to run my docker swarm setup through NPM, i'd have to manually edit configuration files any time I want to add or remove a service, which then breaks any time I make changes. The fact this feature was put off, saved for v3, which still hasn't come after all this time is a major reason for moving away.
Christian, I really love these tutorials, I only mis a few topics here for traefik. These are: Access list External application (via dynamic yml file) Hope you can address these maybe in a next video. Keep up the good work! Btw I’m running traefik now thanks to your latest nginx “little projects” video. Cost me 6 days because the traefik config file cannot handle tabs but only spaces…. Yeah😂
Simply the best tutorial about Traefik. I never understood the labels and wasn't too sure about the difference between the dynamic and static configuration.
Static - Traefik will read at startup Dynamic - Traefik will watch for any change during runtime and reflect on it (only if you enable file or folder watch). Label - Similar to Dynamic, but Traefik will watch the label on the container on Docker. The benefit is that traefik will add a rule as soon as the container is up, but if it goes down, it gets removed.
Man, i'm really struggling with cloudflare DNS challenge. I would love an update to this guide. You kinda sorta not really put stuff in the boilerplate, but it has zero context. Thank you!
At 11:50 you don’t have to put traefik in the same namespace as traefik. You can just create a kubernetes service so that the application can be accessed by other resources within the cluster
Thanks for making this video! I tried Traefik a couple of years ago, didn't understand a thing, and looking at your video now, I'm going "wait, it's _that_ easy? :D"... I'd like to say though, since config-changes to the traefik.yaml file require a restart, putting it in the docker-compose.yaml file makes more sense to me since it removes the need for two files, down to one, and you're already in the right location editing the docker-compose.yaml file to restart the service.
Hi Christian, Could you please do some tutorial for installing Traefik on Proxmox container not docker to service other services running on other containers, I know we may serve these services on Traefik based on Docker, but for best results of backup and restore I'd rather Proxmox containers
Thanks for this excellent video. I watch it at speed rate of 0,75 to follow it. 😁 But it is interesting actually and I want also apply this for my TrueNas server.
Cant figure out why im getting these closed port errors. Any idea? time="2021-11-25T21:27:27Z" level=error msg="Error while starting server: accept tcp [::]:80: use of closed network connection" entryPointName=web time="2021-11-25T21:27:27Z" level=error msg="accept tcp [::]:443: use of closed network connection" entryPointName=websecure I checked that these ports are open from outside.
@@christianlempa I have been searching around but not much luck in the solutions. I actually think its unrelated to the issue im having. I think this error is it trying to connect with ipv6 from the looks of it. My real issue is getting a 404 on every page and not being secure and im not sure why. I have done everything you did in the video.
Hello! thank you for your great youtube content, I would like to use traefik for the first time, and I want to keep my legacy services that are not in containers (no docker), is it possible to set up DNS challenge with cloudflare for this setup? I mean without any configuration related to docker? I have not found any docs, tutorials that can help me, should I put the api token from cloudflare in a linux environment variable? thank you!
If Traefik lets me define all my domains and targets in a config file that I could commit to Git and reproduce with one click, then I'm sold. Need to read up on this. Thanks for the introduction.
You could, if you're using the docker provider it reads configs off container labels., which can live in your compose files, next to the application that needs them. If you're using kubernetes, well, configs are read from there. (Ingress/CRDs) If you just want a directory with loads of files, the file provider lets you load dynamic config from files, feel free to commit that to a git repo. And changes are picked up automatically so, if you have a cronjob auto pulling, well, that works too.
10:19 where you mention about exposing the dashboard, I cant quite understand what you mean. Dont do this in production ...so do what instead? If you dont open the port from the router what difference does it makes if you bind port 8080 of the host to the port 8080 inside the docker? PS even thougjh all of your videos are quite nice and presentation also you speak too fast (even though i can understand you ) and the general meaning \explanation is lost at the end.
Yeah if you don't open it on the router you should be fine. The warning is there to encourage you to use internal docker network with a reverse proxy and authentication mechanism if you want to expose it to the public
Thank you very much for this interessting video. Maybe you should mention that it is not a good practise to put all your containers in the traefik network. Best practise is to create a new "proxy" network for every container that needs to explicitly expose a service via traefik. This will ensure all your backend containers of your service stack (databases, etc...) are not accessible from traefik and also most important are not accessible from other docker containers running behinde traefik web proxy.
Do you think a video about how you approach 'bind mounts vs named volumes' would be worth making? I see that it's kind of a mixed bag in your boiler plate templates.
Thank you for this tutorial! Did you also managed to get multiple simple docker hosts controlled by traefik without using something like e.g. docker swarm?
Hi, just wondering why in the your latest boilerplate docker-compose.yml file, it no longer has the volume for the ssl certificates. Is this no longer necessary? Won't they still get lost if the container is stopped?
hi Christian thanks for the great content i follow the tutorial but unfortunately i got error 404 page not found and i did the || label but got same error
Very good video and tutorial. I have a pfsense router in front of my Truescale server. so now I am confused wherethe reverse proxy should be configured and how to do that and still pass traffic through the pfsense router. Can you help / or do another video as this is a very common setup and confusing where the certificates all go. I would like to use a wild card certificate on both the Pfsense and Truescale servers
Danke Christian! Question, maybe basic, so sorry if so. So, say I deploy a Linode Linux server, then put Docker on it and install Portainer to manage the docker. Then I run through this tutorial to put a get Traefix setup as a container. How can I put Portainer behind Traefik? Or do I need to? Thanks again
Fantatsic tutorial, but :) using your configuration I recieve errors in Portainer log entry: 2022/02/05 14:26:58 command traefik error: yaml: line 19: did not find expected key Any ideas, as everything looks great to me? Thanks
like your clip, plan to switch and your clip helped a little along the way. But what I haven't find a answer if i have have several different servers. lets say a web server which is pure server and another docker server different machine. etc.. Would appreciate it if you could make one that also points to other servers in the same network.
Great video. If I want to set it up only on local network, do I still need to buy a domain? I assume using a local dns server would solve it without a domain.
Thanks! No you don't need to buy a domain, when it's local, but you'll need to mess around with self-signed certs then, I guess. Might be not as straightforward, but possible. Btw I'm also using self-signed certs locally.
This is probably a silly question, but Traefik can handle reverse-proxying for things that aren't Docker/K8s containers right? All of my services run in a bunch of Proxmox nodes, and while I do have quite a few services that are in docker containers, a pretty significant amount of them are also LXCs that run through Proxmox as well. I currently use Nginx Proxy Manager, but I'm finding that there are often times where I feel the configuration I need goes against the grain of what it's designed for, and I'd also like to maybe start doing some automation as well and I've heard Traefik's API is quite nice (whereas NPM does have an API that the dashboard consumes, but it's not well documented at all) so Traefik seems to be shaping up to be a pretty decent candidate to replace NPM for me so long as I can just tell it "When you get a request at this host, redirect it to this IP + Port".
Thanks Thanks Thanks, love the format where you show and explain the setup. So many TH-cams use a monkey 🐒 see monkey 🐒 do approach. Great if your a monkey, shocking if you want to learn and grow your skills.
Amazing video , It did worked a 100% , Now i want to route traffic to my old server . How i do that ? Do I set up an htpp provider ? your help is greatly appreciated
Hi @christian Thanks for the amazing tutorial. For some odd reason my traefik is not coming up. I did a tcpdump to check on it. I see the traffic coming in and out of the machine, however nothing displays. Although I have to say in my tcpdump am having a length of 0
dude i love the content, the topics, and the production quality, BUT SLOW DOWN PLEASE!!!! lol Like just even taking a breath between steps so i at least have time to pause the video and catch up would be great! Other than that great work!
Other than that you make top notch content. And I will give you credit for fantastic English. I have a hard time with some of the German youtubers but other than the pace being a bit fast you are easy to watch and understand.
I came there to say this. I’ll have to listen to it again anyway as I wasn’t watching the video. I listen to videos while doing errands and try ton understand as much as possible without the visual component.
Hi Christian! Saubere Arbeit ! Wie wäre es mal mit einem Video über traefik 3? Bin grad dran das zu konfigurieren - klappt auch ganz gut nur meine UDM ProSE gui will nicht :( hast du nen Tipp?
Christian, how do u do traefik labels when a container uses multiple ports e.g. 6060:80 3262:8080 4363:9354 And then there is also the possibility of a multiple container images in the docker compose which also use their own ports. Is there any docker compose example how this type of traefik deployment would look like? If it was just one port, i would know how to do as i got that to work. but i'm having issues figuring how to deal with multiple ports required x-x;
thanks a lot! :) ..it has so much more good features that I do not need to think whether or not I use this or nginxreverseproxy ..but I would rather see a Matrix channel (give it some more love) than a discord! :P ..btw this video is broken on odysee :/
@@christianlempa hehe ok.. well but your content is arguable also niche :D anyway, I guess there is a lot people interested in tech who actually do use matrix for instance.. Maybe you give it a second thought :)
Great tutorial. But imho it's a terrible idea to spread the whole configuration over all your docker containers. I would assume it's way safer to have configuration like this in one central well known place 😊
Can we using proxy reversing to the docker container while we using UFW ? i try using UFW to allow port 80 and 443 but it blocked port expose docker, how to using UFW instead using proxy reverse to docker container ?
You may have covered this and I just missed it but can I configure a proxy to connect to a service running at a different IP address? I have a Bitwarden and a website running on a Raspberry Pi that I would like to connect to. Thank you.
Sure, you can add a dynamic configuration in the Traefik config file to route a connection to a custom IP address, that could be anywhere. It might be not as straightforward as on the same node, but it's technically possible.
I have a question related to using traefik with kubernetes. So at home I have a k3s cluster with 2 raspis where i would like to run some application ans theres also a Synology NAS which exposes some services aswell. I'm quite new to the whole networking stuff so I'm trying to figure out how to setup traefik the best way. If its setup inside kubernetes for example would it still be possible to route incomming traffic to other machines in the network such as the NAS?
Maybe Im missing it or maybe because this video was older then I realized but the files on your github the yml config and compose files are different then whats in this video.. Is there an updated one? I tried to set it up and still can't manage to get the dashoard to show up. But I think its from something missing in the files or something that has been changed since this video.
At some point, I'm planning to make an updated video tutorial, but that's probably coming out somewhere by the end of this year. Then I will update all the docs, etc.
Can you not have the traefik docker install route to services on your local network outside of its docker network? Some of my services are just running in separate VMs instead of containers.
This is a perfect tutorial and speed, thanks dude. You hit the important points quickly. Too many tutorials and overviews are 30-60+ minutes. Not sure who has that kind of time to watch. Usually we’re trying to quickly solve a problem. We may not need to become an Uber infrastructure expert, but need to learn enough quickly to solve problems and know where to keep ourselves out of trouble. Thanks again!
Thank you bro!
Plenty of us have the time. 💀💀💀💀💀😂😂 The average person, unlike me nowadays, spends hours a day on social media, and builds up extra anxiety, depression, etc. 😂💀🙊🤓
The only point I don't understand is how to install Portainer with it because it seems like he has installed it before installing Traefik. And I don't know how he got this with a SSL cert and the domain working...
@@chibiichen
I believe you should just add the same labels in the portainer docker compose file - obviously you will need to change the host label to point to your portainer
Cheers Christain, I have recently forced myself to build up my Home lab and your videos are absolutely amazing. I dont normally leave a comment but Traefik has been a bit of a mind melting beast so i thought I need to share my appreciation here :p
oh my goodness! I saw quite a lot of similar tutorial, this one is the simplest and the most understandingable video I have even seen!
Thank you so much :)
Awsome video explaining a very complex topic. Struggled for setting up traefik for some weeks, so this was what i was looking for. Alot of good info here.. Keep it up!
Still not decided between Traefik and NPM? Watch this 😜 -> th-cam.com/video/scrtJ1U4wJU/w-d-xo.html
Man. Only bangers on this channel. Music choice is dope as hell.
Great starter video, it really helped me move from NPM to Traefik - thanks Christian and Merry Christmas! 🙂
Hi Christian, great content,helped me a lot! About exchanging certs from staging to production - normally you don't do this, because you have separate containers for staging and production, also two different routes/domains for these service. Thanks a lot for your great job!
Awesome! Exactly what I was looking for. Best traefik totorial I found so far! Thank you!
Thank you so much :)
Thanks for the tutorial Christian! I can understand you perfectly fine, you do not need to slow down.
Thank you for watching :)
Well done mate. I was waiting with networking for too long with my app built on microservices. Your video was great entrypoint!
honestly this tutorial is just incredibly good!
Glad you think so!
I use traefik but nginx is way easier. Thanks again my bald online friend.
Haha, you're welcome
my nginx reverse proxy won't make the ssl :// kinda queless
I agree,, nginx is much easier, simple and powerful
Nginx won't give me let's encrypt certs or even just act as a reverse proxy, it sucks
@@OverAndOverAndOver you actually want Nginx Proxy Manager for that - it certainly does ssl certs, custom ports, access rules, custom paths, etc. But it's advanced configs is a bit difficult.
Thanks!
Thank you for your support :)
Really one of the best guides on this subject. Thanks! Would love to see a way to secure the traefik dash natively (without teleport)
Thanks! There will be something new coming ;)
Great video... And THANK YOU for properly referring to /etc/ as etcetera and not as Etsy
its extra terrestrial conf... everybody knows that!!!
Lifesaver. You're so good at what you do. BTW I love how you pronounce the word "container". 😊
Thanks mate ;)
Thanks for the video =)
Managed to setup Traefik with a bunch of other containers (e.g. portainer, pihole) by watching this video.
Haha, I wish I had this video like 3 weeks ago. Took me around 3 days to fully understand how Traefik works, but it's one of the best reverse proxies I have used and fully recommend to anyone. I myself use something called Authelia, definitely not as complicated as Teleport but does provide SSO for your services on a much smaller scale Although the learning curve is high, it's well worth it. Great tutorial man, really enjoyed this one.
Thank you! Yeah I can feel you, took me a few days as well to understand it :D
Best Video Tutorial Ever Seen On Traefik Proxy.
Wow, thanks!
I just love traefik. Just have labels in your docker compose and instantly get an ssl secured subdomain for the application you run.
I followed this tutorial line by line but I can't access the dashboard? What could I possibly be doing wrong?
same problem
Looks like I'm gonna migrate from my freshly set up NPM to Traefik today :') Thanks for putting this on my radar!
Nice! Good luck then 😁
Compered to NPM this is a pretty complicated install but worth doing for some considering NPM has some issues.
Nice work sir, one day I will take the time to learn how to do this, for now I will stick with NPM.
What issues does NPM have?
@@chibiichen The biggest one, which ive found out only today while trying to use it with docker swarm, is that the webUI still doesn't have support for loadbalanced upstreams. It was first submitted as a missing feature on the github 4 years ago, cited as coming with v3 which is still nowhere to be seen. As things stand, if I want to run my docker swarm setup through NPM, i'd have to manually edit configuration files any time I want to add or remove a service, which then breaks any time I make changes. The fact this feature was put off, saved for v3, which still hasn't come after all this time is a major reason for moving away.
Thanks, Chris for this wonderful video. I can now sleep peacefully 😊
Haha you’re welcome ☺️
damn bro, you're hella fast! thanks for sharing some of your skillz!
Best explanation I’ve found. Instant subscribe!
Thank you bro :)
Christian, I really love these tutorials, I only mis a few topics here for traefik.
These are:
Access list
External application (via dynamic yml file)
Hope you can address these maybe in a next video. Keep up the good work!
Btw I’m running traefik now thanks to your latest nginx “little projects” video. Cost me 6 days because the traefik config file cannot handle tabs but only spaces…. Yeah😂
Great work. Thank you very much for all the knowledge sharing!
Glad it was helpful!
This was a seriously great video. Thank you so much for this! Love the content.
Thank you so much! ;)
Simply the best tutorial about Traefik. I never understood the labels and wasn't too sure about the difference between the dynamic and static configuration.
Thanks! :)
Static - Traefik will read at startup
Dynamic - Traefik will watch for any change during runtime and reflect on it (only if you enable file or folder watch).
Label - Similar to Dynamic, but Traefik will watch the label on the container on Docker. The benefit is that traefik will add a rule as soon as the container is up, but if it goes down, it gets removed.
Awesome video! Thank you for sharing you knowledge with us 👍
Thank you! 😉
Man, i'm really struggling with cloudflare DNS challenge. I would love an update to this guide. You kinda sorta not really put stuff in the boilerplate, but it has zero context.
Thank you!
At 11:50 you don’t have to put traefik in the same namespace as traefik. You can just create a kubernetes service so that the application can be accessed by other resources within the cluster
Thanks for mentioning
Thanks for making this video! I tried Traefik a couple of years ago, didn't understand a thing, and looking at your video now, I'm going "wait, it's _that_ easy? :D"... I'd like to say though, since config-changes to the traefik.yaml file require a restart, putting it in the docker-compose.yaml file makes more sense to me since it removes the need for two files, down to one, and you're already in the right location editing the docker-compose.yaml file to restart the service.
Haha thank you! Glad it could help you :)
Was using traefik but now I switched to caddy.
For simple configuration is easier.
For complex configuration is easier.
Hi Christian, Could you please do some tutorial for installing Traefik on Proxmox container not docker to service other services running on other containers, I know we may serve these services on Traefik based on Docker, but for best results of backup and restore I'd rather Proxmox containers
Do you have any videos on the middleware, such as how to load it, use it and set it up correctly?
Thanks for this excellent video. I watch it at speed rate of 0,75 to follow it. 😁
But it is interesting actually and I want also apply this for my TrueNas server.
Cant figure out why im getting these closed port errors. Any idea?
time="2021-11-25T21:27:27Z" level=error msg="Error while starting server: accept tcp [::]:80: use of closed network connection" entryPointName=web
time="2021-11-25T21:27:27Z" level=error msg="accept tcp [::]:443: use of closed network connection" entryPointName=websecure
I checked that these ports are open from outside.
I've not seen this error message before :/ Have you reported it on the github project?
@@christianlempa I have been searching around but not much luck in the solutions. I actually think its unrelated to the issue im having. I think this error is it trying to connect with ipv6 from the looks of it. My real issue is getting a 404 on every page and not being secure and im not sure why. I have done everything you did in the video.
Hello! thank you for your great youtube content, I would like to use traefik for the first time, and I want to keep my legacy services that are not in containers (no docker), is it possible to set up DNS challenge with cloudflare for this setup? I mean without any configuration related to docker? I have not found any docs, tutorials that can help me, should I put the api token from cloudflare in a linux environment variable? thank you!
Hi, if is possible it will be great an updated tutorial about docker and trafik but with cloudflare dnsChallenge. Thanks again!
Yep that's a good one, I'll make that soon :)
@@christianlempa looking for this too as seems no-one has explained it
If Traefik lets me define all my domains and targets in a config file that I could commit to Git and reproduce with one click, then I'm sold. Need to read up on this. Thanks for the introduction.
You could, if you're using the docker provider it reads configs off container labels., which can live in your compose files, next to the application that needs them.
If you're using kubernetes, well, configs are read from there. (Ingress/CRDs)
If you just want a directory with loads of files, the file provider lets you load dynamic config from files, feel free to commit that to a git repo. And changes are picked up automatically so, if you have a cronjob auto pulling, well, that works too.
10:19 where you mention about exposing the dashboard, I cant quite understand what you mean. Dont do this in production ...so do what instead? If you dont open the port from the router what difference does it makes if you bind port 8080 of the host to the port 8080 inside the docker?
PS even thougjh all of your videos are quite nice and presentation also you speak too fast (even though i can understand you ) and the general meaning \explanation is lost at the end.
Yeah if you don't open it on the router you should be fine. The warning is there to encourage you to use internal docker network with a reverse proxy and authentication mechanism if you want to expose it to the public
Thank you very much for this interessting video.
Maybe you should mention that it is not a good practise to put all your containers in the traefik network.
Best practise is to create a new "proxy" network for every container that needs to explicitly expose a service via traefik. This will ensure all your backend containers of your service stack (databases, etc...) are not accessible from traefik and also most important are not accessible from other docker containers running behinde traefik web proxy.
Thanks! Yeah that might be a topic for a separate video.
Very useful 👌
Thanks a lot
Do you think a video about how you approach 'bind mounts vs named volumes' would be worth making? I see that it's kind of a mixed bag in your boiler plate templates.
Maybe it would be nice to do a "docker best practices"? Let me think about it
Thank you for this tutorial! Did you also managed to get multiple simple docker hosts controlled by traefik without using something like e.g. docker swarm?
Hi, just wondering why in the your latest boilerplate docker-compose.yml file, it no longer has the volume for the ssl certificates. Is this no longer necessary? Won't they still get lost if the container is stopped?
I'm storing the certs in the /etc/traefik/certs folder which is alredy stored in a volume, so I thought I could remove it.
@@christianlempa Thanks for replying. Makes sense 🙂
how much coffee did you have before recording this? You're flying through this. Thanks for putting it this together, I'll have to rewatch slowed down.
I usually drink 1 cup a day :D So not much
hi Christian thanks for the great content i follow the tutorial but unfortunately i got error 404 page not found and i did the || label but got same error
Very good video and tutorial. I have a pfsense router in front of my Truescale server. so now I am confused wherethe reverse proxy should be configured and how to do that and still pass traffic through the pfsense router. Can you help / or do another video as this is a very common setup and confusing where the certificates all go. I would like to use a wild card certificate on both the Pfsense and Truescale servers
Thanks, you made this look easy! =)
Thank you! :)
Great video, but can I also use traefik to get certificates from my local services without having an external dns pointing to it?
Any chance you could repeat this tutorial with recent version?
Danke Christian! Question, maybe basic, so sorry if so. So, say I deploy a Linode Linux server, then put Docker on it and install Portainer to manage the docker. Then I run through this tutorial to put a get Traefix setup as a container. How can I put Portainer behind Traefik? Or do I need to? Thanks again
Fantatsic tutorial, but :)
using your configuration I recieve errors in Portainer log entry:
2022/02/05 14:26:58 command traefik error: yaml: line 19: did not find expected key
Any ideas, as everything looks great to me? Thanks
Mostly this is because the traefik.yml config isn't indented correctly.
Brilliant I will take a look at the YAML indentation, thanks
used Visual Studio Code instead and no errrors, thanks for your help.
Super useful.
Thanks man !!
like your clip, plan to switch and your clip helped a little along the way. But what I haven't find a answer if i have have several different servers. lets say a web server which is pure server and another docker server different machine. etc..
Would appreciate it if you could make one that also points to other servers in the same network.
i have been having issues with connecting to the traefik dashboard. do you have any videos showing how you make a public dns record.
not yet, but there will be a new video talking about how to secure it with authentik
Fantastic Tutorial!
Thank you so much :)
Great video. If I want to set it up only on local network, do I still need to buy a domain? I assume using a local dns server would solve it without a domain.
Thanks! No you don't need to buy a domain, when it's local, but you'll need to mess around with self-signed certs then, I guess. Might be not as straightforward, but possible. Btw I'm also using self-signed certs locally.
This is probably a silly question, but Traefik can handle reverse-proxying for things that aren't Docker/K8s containers right? All of my services run in a bunch of Proxmox nodes, and while I do have quite a few services that are in docker containers, a pretty significant amount of them are also LXCs that run through Proxmox as well.
I currently use Nginx Proxy Manager, but I'm finding that there are often times where I feel the configuration I need goes against the grain of what it's designed for, and I'd also like to maybe start doing some automation as well and I've heard Traefik's API is quite nice (whereas NPM does have an API that the dashboard consumes, but it's not well documented at all) so Traefik seems to be shaping up to be a pretty decent candidate to replace NPM for me so long as I can just tell it "When you get a request at this host, redirect it to this IP + Port".
I get recommended this just after setting up my nginx proxy manager 😭
Well, then you got yourself your next project :D
thanks for sharing! Love it :)
You're welcome :D
thx for the video, but the config files from your video is different from the github, that's a bit confusing
Thanks Thanks Thanks, love the format where you show and explain the setup.
So many TH-cams use a monkey 🐒 see monkey 🐒 do approach. Great if your a monkey, shocking if you want to learn and grow your skills.
Amazing video , It did worked a 100% , Now i want to route traffic to my old server . How i do that ? Do I set up an htpp provider ? your help is greatly appreciated
Too much GUI tbh. Portainer is cool and all, but what if I just want a docker-compose file to configure my entire homelab?
Love you my, friend, like and comment done!!
Thanks!
In this tutorial, Is portioner itself being resolved though Traefik or is Portainer just a container with no SSL?
Gr8 video mate i would do the example
Is it true, that I should add a treafik network to every stack I got in portainer to got access to use it with other containers in portainer?
Hi @christian Thanks for the amazing tutorial. For some odd reason my traefik is not coming up. I did a tcpdump to check on it. I see the traffic coming in and out of the machine, however nothing displays. Although I have to say in my tcpdump am having a length of 0
You're welcome! :) If you have a problem, join our discord, maybe somebody can help you.
Why does your Portainer dashboard look nicer and have more options than mine? And it doesn't say if it's CE or BE?
dude i love the content, the topics, and the production quality, BUT SLOW DOWN PLEASE!!!! lol Like just even taking a breath between steps so i at least have time to pause the video and catch up would be great! Other than that great work!
Good idea, I know that I need to improve on my video pacing, hopefully I'll get better over time :D
Other than that you make top notch content. And I will give you credit for fantastic English. I have a hard time with some of the German youtubers but other than the pace being a bit fast you are easy to watch and understand.
I came there to say this. I’ll have to listen to it again anyway as I wasn’t watching the video. I listen to videos while doing errands and try ton understand as much as possible without the visual component.
I watch it with speed of 1.75.
Refer to button most top right (cog wheel)
Inside you will find speed control. Adjust accordingly to fit your -IQ- individual needs.
Hi Christian! Saubere Arbeit ! Wie wäre es mal mit einem Video über traefik 3? Bin grad dran das zu konfigurieren - klappt auch ganz gut nur meine UDM ProSE gui will nicht :( hast du nen Tipp?
Hi. I get too many redirects error. What could be the solution?
Christian, how do u do traefik labels when a container uses multiple ports e.g.
6060:80
3262:8080
4363:9354
And then there is also the possibility of a multiple container images in the docker compose which also use their own ports.
Is there any docker compose example how this type of traefik deployment would look like?
If it was just one port, i would know how to do as i got that to work. but i'm having issues figuring how to deal with multiple ports required x-x;
Did you also install Portainer with Traefik? I wonder because you use it in the video but you didn't show how you installed it.
Hi thanks for the tutorial, do you have a website that categories all your videos?
Slightly off topic question but what software do you use for your drawing/blur effect in the video?
Great and usefull video, thanks a lot!
You're welcome 😀
thanks a lot! :) ..it has so much more good features that I do not need to think whether or not I use this or nginxreverseproxy ..but I would rather see a Matrix channel (give it some more love) than a discord! :P ..btw this video is broken on odysee :/
Thanks ;) I don't focus much on Odysee or Matrix, as it's just such a niche platform and I want to get my content to as many people as I can reach.
@@christianlempa hehe ok.. well but your content is arguable also niche :D anyway, I guess there is a lot people interested in tech who actually do use matrix for instance.. Maybe you give it a second thought :)
Would you also make a video about WSO2?
Hm I'm not quite sure, so far traefik works great for me.
Great tutorial. But imho it's a terrible idea to spread the whole configuration over all your docker containers. I would assume it's way safer to have configuration like this in one central well known place 😊
Thanks! Well everybody has his own way of doing things ;)
What do you mean by 'spread the whole configuration over all your docker containers'?
@@lucEast well the config gets attached to the container, rather than having all of it in a central place, where you can clearly see the connections.
Can we using proxy reversing to the docker container while we using UFW ?
i try using UFW to allow port 80 and 443 but it blocked port expose docker, how to using UFW instead using proxy reverse to docker container ?
run:
"ufw allow in on docker0"
then change DEFAULT_FORWARD_POLICE to “ACCEPT” in /etc/default/ufw
reload using:
"ufw reload"
how would you run traefik with Pi-hole both using the port 80?
Can someone explain to me how u can do this without portainer?
You may have covered this and I just missed it but can I configure a proxy to connect to a service running at a different IP address? I have a Bitwarden and a website running on a Raspberry Pi that I would like to connect to. Thank you.
Sure, you can add a dynamic configuration in the Traefik config file to route a connection to a custom IP address, that could be anywhere. It might be not as straightforward as on the same node, but it's technically possible.
Great stuff!
Great guide, i need to move from npm to traefik to use zerossl because of expired root cert on letsencrypt (and LG tv's havent updated..)
Thanks! :)
I have a question related to using traefik with kubernetes. So at home I have a k3s cluster with 2 raspis where i would like to run some application ans theres also a Synology NAS which exposes some services aswell.
I'm quite new to the whole networking stuff so I'm trying to figure out how to setup traefik the best way. If its setup inside kubernetes for example would it still be possible to route incomming traffic to other machines in the network such as the NAS?
Maybe Im missing it or maybe because this video was older then I realized but the files on your github the yml config and compose files are different then whats in this video.. Is there an updated one? I tried to set it up and still can't manage to get the dashoard to show up. But I think its from something missing in the files or something that has been changed since this video.
At some point, I'm planning to make an updated video tutorial, but that's probably coming out somewhere by the end of this year. Then I will update all the docs, etc.
@@christianlempasounds good. Appreciate the reply.
Can i also use traefik to encrypt my local traffic? I tried doing thusbwith Caddy, but i got stuck.
What do you mean by local traffic? From your PC to your Homeserver? If so that’s possible
a proxy shouldn't be written for EBPF?
Can you not have the traefik docker install route to services on your local network outside of its docker network? Some of my services are just running in separate VMs instead of containers.
I am stuck trying to rout traffic to my angular app and django backend.
followed along but like most of your videos it does not work on my end
maybe a stupid question but for production resolver you need a propert dns name registered?
yes dns is required for SSL certs and domain names