You explain complex topics so well, I'm a beginner and I actually understand concepts so much better from watching your videos. Thank you
@christianlempa3 жыл бұрын
Thank you, that makes me so happy it's helping you! :)
@FireBean8504 Жыл бұрын
As a long time Traefik user and the first R-Proxy I ever learned on... NGINX Proxy Manager HANDS DOWN for at home. I have incorporated it at my place of work as well. It's fantastic and when you get support for it, they will help with making sure NPM is doing stuff securely.
@Ripstikerpro Жыл бұрын
As an intermediate, I've been looking all around for a good explanation on how to properly use reverse proxies and how to set them up and all that. This video has been great for that!!
@Dorff_Meister Жыл бұрын
I just migrated from doing reverse proxy with HAProxy to using nginx proxy manager (using the provided GUI in my Netgate/pfsense router). I'm doing a lot of docker (with compose) but no Kube (no interest). After watching this, I'm glad I chose NPM vs Traefik - I'm really liking NPM.
@GadgeteerZA2 жыл бұрын
Thanks been watching many of your other videos, but now that I started thinking about Traefik or Traefik Hub, I saw this older video. But just wanted to say with NPM what had been helping me was using a wildcard cert, and pointing to container names versus using container IP addresses. The latter allows the external ports to stay closed, and NPM always finds the containers, no matter if their IP addresses change this made my life way easier, and also prevented docker containers punching open the firewall ports automatically when creating new containers.
@Glatze6033 жыл бұрын
Hi Christian, great video and content! Thanks very much! For me / my homelab NPM (with Authelia!) is the simplest and best choice, like you mentioned it :-) I like it when things are simple and functional (like NPM in combination with authelia for additional 2fa), I like it when my homelab-stuff is very secure (dmz-firewall-concept with opnsense and sophos xg) and I like to automate everything (ansible, scripts...) - that's why I have and love my homelab and that's the reason why I change things often :-) I am looking forward to your server-rack videos.
@christianlempa3 жыл бұрын
Thank you so much :) Can you send me a DM how you're doing NPM with Authelia (if you are okay with your stuff ending up in a video)? It's a topic I wanted to look at anyway.
@Glatze6033 жыл бұрын
@@christianlempa No problem, but actually I have to use mail. Take a look 🙂
@afrosheenix Жыл бұрын
@@christianlempa did you get this information? I have it done with single and 2fa now, I can explain it now.
@ZokarNalayak3 ай бұрын
Okay let me break it down for you: Nginx: 1.Web support. 2. Easy certificate generation. 3. Easy for beginners. Traefik: 1. For advance users. 2. Yaml Configuration based. 3. Load balancing. 4. Easily replicable 5. No gui support except for dashboard. 😊 I love both of them.❤
@adzcraig2 жыл бұрын
This is a great overview of the products and helped me decide to go with NGINX for now as I want something quick for self hosting set up. I'm planning to dabble with docker and container automation later so will take a look a traefik at that point.
@christianlempa2 жыл бұрын
Thank you! ;) Good decision to start with btw
@majorgear1021 Жыл бұрын
Agreed. I don’t need orchestration for my home lab. I only have one of each app and once they are deployed, I don’t change them. Once and done!
@mikkel31353 жыл бұрын
Personally loving Traefik. When you know how it works, it's insanely fast to get a new service up. I already copy from one of my other stacks/docker compose files, so I simply need to change the labels to the new subdomain and I'd basically be good to go.
@christianlempa3 жыл бұрын
Fully agree with you!
@karserasl3 жыл бұрын
I totally agree. It took me a few days of experimenting, but after setup, its extremely easy to do things. For ex. Its very easy to create chains for different setup, like having one with Authelia and one for Google Oauth and another with no auth. Adding one domain for external and one subdomain for locals with its own cert. Passing headers or bypass auth if for ex, an API header is present etc.
@tcpipa Жыл бұрын
I also totally agree with you, plus you can store all your configurations in your own repository. It's fantastic!! that means you can make gitops and have a perfect definition of your homelab or production environment and, well, sleep soundly like a baby at night xD
@dyegoe Жыл бұрын
Hi! Like you, I am not looking to self-host but to learn. With that in mind, I am currently running my Kubernetes with Cilium CNI and using its own Ingress controller. I will be changing it to the API Gateway in the near future. As I read, the new API gateway controller from Kubernetes solves many gaps in the ingress controller
@kezzkezzkezz2 ай бұрын
Can we get an updated version of this video, including Caddy and Zoraxy and others
@andreacazzaniga84882 жыл бұрын
I would suggest beginners to start with nginx and make it work. Then, if the project grows and needs increase, consider switching to traefik
@christianlempa2 жыл бұрын
Yep, makes sense to me ;)
@ThePapanoob3 жыл бұрын
Hi Christian! I can only recommend the absolute standard cert-manager & nginx-ingress stack (with some ingressdefinitions routing it to the backend services) :D its a bit "harder" to setup however its really damn simple in the sense that you always know why stuff is doing what it does. theres no magic going on in the background
@Tech-wq2fi3 жыл бұрын
Do you have any good resources that can accomplish that? Would love to learn more about that, if not could you point me to the right direction where should i be looking?
@christianlempa3 жыл бұрын
Oh boy, cert-manager is on my list! That's a great suggestion :) I probably will look at combining it with traefik though.
@Movies41183 жыл бұрын
I switched from Swag (Formerly known as LE Proxy) to Nginx Proxy Manager. It was a natural progression , since both are built on top of Nginx. I found Traefik to be overly complicated for my self-hosting needs.
@christianlempa3 жыл бұрын
Nothing against NPM, it's awesome! :)
@andreacazzaniga84882 жыл бұрын
Same here
@afrosheenix Жыл бұрын
I'm looking at Traefik because NPM seems to be aging, maybe nothing under the hood needs to change and it is finished. However, combined with Authelia, doing 2 factor auth with a single edit to a file, it is like simple magic.
@JohnDoe1999-lg7mhАй бұрын
Many thanks for all the great video that you make. Currently looking at deploying my first proxy. Will be NGINX for me. Strictly self hosting and only doing local access (no internet exposed services).
@christianlempaАй бұрын
Glad it was helpful!
@s1nghsays2 жыл бұрын
@christianlempa What is the container management app/dashboard you use, featured at 01:39 ? is it Portainer (with a not default theme) ?
@MetalisForever666 Жыл бұрын
My Nginx Proxy Manager doesn't refresh the Let's Encrypt certificates. I had to do it manually.
@lmaoroflcopter3 ай бұрын
I love my npm setup. Supports wildcard certs and automatically, too a massive help.
@paneesh2 жыл бұрын
1:40 what is the web interface/admin panel used here?
@carl_thunder3 жыл бұрын
I’m sticking with NPM. I tried running traefik and got it running but couldn’t figure out how to get it to work with multi domains so I went back to NPM and haven’t thought about traefik since.
@heliwrsfoestuff59132 жыл бұрын
have you tried Caddy instead of NPM or Traefik
@nurlanturganaliev33753 жыл бұрын
I am happy that watching your new posted tutorial one of the first people (after 1 hour it is posted). Grammatically might be not correct but you should get the point. Sorry for my weak english.
@christianlempa3 жыл бұрын
Hey thank you so much! Greatly appreciated :)
@heinzbroehl45983 жыл бұрын
Why not try Caddy 2. Very easy to use and to setup
@christianlempa3 жыл бұрын
Hm no idea, maybe I need to try it 😉
@testes23902 жыл бұрын
I just installed Caddy 2, I read on their forum that instructions for setting up DNS challenge changed, so I am looking to NPM and Traefik now, maybe Caddy 2 needs more maturity?
@joanandestin420110 ай бұрын
Hi I have not been able to get traefik to work. I keep getting this error "level=error msg="Unable to obtain ACME certificate for domains" I am not sure if it is because I am using nginx proxy manager and with the same domain and wildcard. I am not sure what I am doing wrong. Can you assist?
@christianlempa10 ай бұрын
Check out our Discord for help, maybe we'll able to help you
@alexanderos82093 жыл бұрын
I agree with your conclusion that traefik is a bit more comlicated, less well documented but more powerful. But you forgot one for me crucial point: Traefik configuration files (if yml is used) integrate realy well with ansible. You can generate "static" configuration files with ansible and put it in a folder to be loaded dynamically. It sounds a bit comlicated (and is) but allows to directly expose all services via Trafic and not just docker. For this reason alone I switched to Traefik as my reverse proxy BTW: I am looking forward to seeing your infrastructure.
@christianlempa3 жыл бұрын
That's an interesting point I haven't thought about. But I'll look into that, homelab automation is a big topic for me in 2022.
@timderks59603 жыл бұрын
6:00 You mention uploading the self-signed certs to the trusted CA store of all of your clients. Have you done this manually on each device, or is there an easier way that I'm unaware of?
@christianlempa3 жыл бұрын
You can Script it in Windows and Linux, in AD networks you can also do this with GPO, but for mobile devices I haven't found an automated way unfortunately
@michaelgraff69782 жыл бұрын
I use Traefik for my Kubernetes cluster, and nginx for my Docker hosts. Both have a wildcard SSL cert for the part of the namespace they control. I also have my Docker host in a colo, while the Kubernetes is at home, and consists of lower end PCs and Raspberry Pis. It's "interesting" mixing architectures in the same cluster...
@durgeshkshirsagar1165 ай бұрын
Is your spect transparent?
@stevendonaldson12162 жыл бұрын
Great clarifications for the different situations. I thought the extra comments on the differences was helpful. I need to look at nginx for reverse proxy for my home-lab hosted ideas. One more thing to learn
@christianlempa2 жыл бұрын
Glad it was helpful!
@comosaycomosah4 ай бұрын
as somewhat of a noob i heard 2:40 and was so confused for a few lol great video bro
@alejandroburbano6085 Жыл бұрын
Hello, i followed your tutorial and it was easy to configure my container and port forwarding. But when i tried to install my custom ssl certificate, traefik doesn't recognize it
@MelroyvandenBerg2 ай бұрын
But for Ingress you also have Kubernetes Ingress Controller or NGINX Ingress Controller. So in a kubernetes system Nginx can be used as well without any issues.
@TabakMan3 жыл бұрын
Hi, I am using Nginx proxy manager in my home lab and Nginx Ingress Controller in Kubernetes. I have never used Traefik and probably idea for future video - Nginx VS Traefik as Ingress controllers in Kubernetes
@christianlempa3 жыл бұрын
Hmmm I'll think about it! Thanks ;)
@MrPDC-jr5yl Жыл бұрын
Amazing Christian. Can you please create a detailed tutorial for SWAG setup? Docker and multiple websites and services setup with domain and cloudflare. Very confusing documentation :). Thanks
@wtfmrkratos3 жыл бұрын
I use HAProxy, and it's configured with context path routing, but i'm thinkng of trying out traefik with the whole subdomain routing.
@christianlempa3 жыл бұрын
Interesting, tell us how that went for you ;)
@sidneyking11 Жыл бұрын
I am having to travel abroad and want to be able to access my jellyfin that in running in docker on a proxmox server. Any suggesting on how access jellyfin remotely and make it secure? I am stuck and really could use some help before I have to travel.
@johnnyvvlog3 ай бұрын
I've used NPM for quite some years but the latest couple of releases have been pretty unstable and giving me internal errors when creating new hosts. Even starting from scratch with a new install gives me troubles. Good for 10-15 hosts but after that problems start. I run a Netgate firewall and switched to haproxy+acme on it and it's been rock solid ever since. Not the nicest interface and a bit complicated at first but very stable and very fast!
@christianlempa3 ай бұрын
NPM has many problems, that's why I don't use it anymore.
@Tekgnome.2 жыл бұрын
I've been running NGINX reverse proxy manager with Fail2Ban with cloudflare and it's been fantastic 😀
@christianlempa2 жыл бұрын
Very nice!
@RahulKumar-hq6wm3 жыл бұрын
Thank you bro for making such informative videos 🔥 love you ❤️
@christianlempa3 жыл бұрын
Glad you like them!
@famshahgeldyan49902 жыл бұрын
Why no caddy? I dont get it.
@christianlempa2 жыл бұрын
Haven't used it ;)
@famshahgeldyan49902 жыл бұрын
@@christianlempa oh but then you definitely should try it out 😁, I mean, after having used apache/nginx/traefik/netscalers/etc... I just fell in love with caddy webserver. Secure by design, auto letsencrypt, clustered shared ssl certs, load balancing of anything downstream and much more. With 1 line in the config you have a ssl terminator with letsencrypt and load balanced backend reverse proxy.
@valizeth4073 Жыл бұрын
Given how much troubles I've had with nginx and proxy manager I'm probably gonna switch. One power outage and nginx just refused to work again
@scubeedu22 жыл бұрын
Hey Christian! Just a quick question about your preferences while securing your homelab. NPM and others like it work really well, and only having to have port 80/443 open is great. Question is, do you use Cloudflare tunnels at all so that you don't have to have any ports open at all? I have NPM running, but when used with CF tunnels, appears unusable and trying to auto-update Letsencrypt certs doesn't work. What do you do or recommend to keep the nasties away?
@christianlempa2 жыл бұрын
I would only expose as much as you need in your home network. Maybe adding a firewall at some point might be a good idea. As for my home lab, I don't expose any ports publicly, I use a VPN or teleport to "dial" into my servers from outside.
@scubeedu22 жыл бұрын
@@christianlempa ok thanks for the info. Using tunnels, I felt like I was limiting myself, but protecting my homelab by having all ports closed is the most secure. You make terrific videos Christain - glad to hear that you are taking the proper amount of time for yourself and your famil!!!
@olafall_sweden7 ай бұрын
I have used Nginx Proxy Manager, aswell as Traefik and HA Proxy but now I use the Kemp Free LoadMaster Load Balancer. Work well for my purpose but maybe I will go somewhere else in future as my homelab is for testing, learning and fun mostly.
@LucianoEvaristoGuerche2 жыл бұрын
Do you have any video showing how to configure TCP and UDP routing (Minecraft and Minecraft Bedrock)?
@christianlempa2 жыл бұрын
No sorry
@dadooron62472 жыл бұрын
Ich habe mir auch die Frage gestellt, was ich eigentlich benötige. Nach 5 Jahren mit Traefik bin ich vor 2 Jahren zu NPM gewechselt und habe seitdem mehr Zeit für wichtige Sachen. Das Hinzufügen neuer Hosts ist ein Kinderspiel. Selbst mit eingespielter Traefik-Routine bin ich mit NPM immer schneller fertig. Aber wie Du schon sagst - - Anwendungsabhängig.
@afnannr12492 жыл бұрын
Hey, i want to config HA of NPM(1 master NPM and 1 backup NPM) , is that possible? and how?
@uuu123432 жыл бұрын
Hi Christian! May I ask, how do you decide what motherboard and cpu to get for your servers? And do you have any budget Motherboards to recommend for either beginners or perhaps on the cheaper options?
@christianlempa2 жыл бұрын
You can find the hardware I’m using on my kit.co/ChristianLempa page
@jonathanvargas96933 жыл бұрын
I prefer traefik but I have had problem on deploying docker containers on elastic beanstalk. Due to AWS healthy check due to logs format so I had been forced to use nginx in that case
@SpookyLurker3 жыл бұрын
What about Caddy?
@christianlempa3 жыл бұрын
Haven't used it, yet
@helloworld81363 жыл бұрын
I’m using caddy 2, it’s so easy to configure I don’t know why it’s not used more often. Makes me wonder if there’s something wrong with caddy that I’m not aware of.
@KR1ML0N2 жыл бұрын
Should create a video on caddy
@morganpittkin68672 жыл бұрын
Yeah for realzies. Nginx for high performance at the expense of usability (although NPM helps), Traefik for that tasty integration with K8s/Docker, and Caddy seems perfect for home-labbers who like to tinker. It’s flexible and easy to configure, you can compile your own into a single binary with whatever plugins you want (which I hear tell are easy to write if you’re into that s$&t), plenty performant for home lab purposes, and being written in Go you get a code base that any old schmuck can understand and audit, as well as the safety/security features of the language and runtime. It’s right in the sweet spot!
@majorgear1021 Жыл бұрын
Nah.
@alanjrobertson2 жыл бұрын
Great video. I've only just got into this a few weeks ago and TBH really liking NPM so far so will probably stick with it for now for my simple needs. BTW looks like a really nice bash prompt you've got and looks like you're using Windows Terminal too - would you mind letting me know which font and prompt customisation you're using? I like Caskaydia from Nerd Fonts but finding only some of the icons are showing up with it.
@krishnachaitanya48223 жыл бұрын
What terminal are you using in your desktop? It looks cool!. If somebody knows an answer to this, please reply.
@christianlempa3 жыл бұрын
Just made a video about it: kzbin.info/www/bejne/d3yVe3hojth-qtE
@giovannipetroselli61033 жыл бұрын
Hi Cristian, it is possible to implement SSO with Authelia and ngnix or Traefik? I've configured Authelia to land in another site with login page. How can pass one time credential to enter directly to site without relogin? Thanks
@Glatze6033 жыл бұрын
That's not what you implement with authelia. Authelia only offers additional authentification-options. The benefit of authelia is, that the first authentification (username/password) is only necessary once, if you want to access multiple apps behind authelia/npm.
@giovannipetroselli61033 жыл бұрын
@@Glatze603 Ok Markus Thanks. Is there some apps that permits this? Thanks!!
@Glatze6033 жыл бұрын
@@giovannipetroselli6103 Hi, I don't think so because if your app needs authentication, authelia does not know it. If your app has no authentication, you only need to authenticate in authelia (1 or 2 factor). You see with authelia you can activate 2fa for apps, that has no authentication by default. If you use bitwarden (or vaultwarden) you have minimal work to use complex usernames and passwords, so SSO is not really necessary.
@nalle4752 жыл бұрын
I used to run HA on pfSense but now i don ‘t hava pfS anymore. Trying Nginx for some time, to much manual stuff. Switch to NPM (found out its actually a modified OpenResty) and added Authelia, fantastic combo. Easy to use still after being away for almost 2 months. Now my homelab has grown and I tinkering with Traefik and HA. Will I switch, yes. Which one, the one I used or the new one? Traefik will give me more of a learning experience, so I think it’s Traefik.
@christianlempa2 жыл бұрын
Sounds great! Have you considered using a firewall together with Traefik?
@nalle4752 жыл бұрын
@@christianlempa my servers and vm’s have firewalls and fail2ban/CrowdSec. Considering to go with a tunnel from Cloudflare then there is no open ports and no ip shown
@christianlempa2 жыл бұрын
Solid setup!
@TheNERDad2 жыл бұрын
Hallo! Fail2Ban und Nginx Proxy Manager schon mal zusammen vernetzt?
@podroznik22142 жыл бұрын
Can you use nginx with web app on another host?
@christianlempa2 жыл бұрын
Yes
@kaspersergej3 жыл бұрын
What makes in your opinion nginx less "professional" than traefik? Traefik and nginx are in two different product categories with overlapping functionality.
@christianlempa3 жыл бұрын
You clearly misunderstood something in the video, I didn't say that.
@kaspersergej3 жыл бұрын
@@christianlempa I’m referring to 8:25
@knowledgeispower172 жыл бұрын
For most people Nginx is a way to go, easy to setup and mantain. On the other hand most people doesnt even now what is a reverse proxy. :D
@yashpokharel96282 жыл бұрын
Please create a video for Self Signed SSL, Also, with teleport 8, I m unable to add node servers because of this.
@christianlempa2 жыл бұрын
Already planned ;)
@carstenr.16822 жыл бұрын
I started with NGINX Proxy Manager, but the annoying part was the change of ACLs, this results in a reconfiguration all linked entries/hosts. I'm now using Traefik for 9 month and I'm really happy with Traefik. Big thanks to Techno Tim for his HowTo. Authelia is also integrated very easily.
@cheebadigga40922 жыл бұрын
Cloudflare + NPM as Kubernetes deployment. Guess I'm the underdog now! :D
@christianlempa2 жыл бұрын
Haha well yeah on Kubernetes probably :D
@gdevelek Жыл бұрын
Great overview video, yet the music is too loud and distracting.
@christianlempa Жыл бұрын
Thanks :) Sorry for the music :P
@Wahinies6 ай бұрын
How bout Caddy Server?
@christianlempa6 ай бұрын
Still too committed on traefik :P
@ddh7563 жыл бұрын
seems like neither support ocsp stapling
@OfficialChiller2 жыл бұрын
Ich nutz auch ehr Traefik für mein HomeLab, ist auch recht einfach muss man sagen. Wobei ich mich auch nicht scheue andere/neue Sachen anzuschauen. Aber ich hab eine "interessante" Konstellation, neben Proxmox betreibe ich meine eigene OPNsense und gerade für den Bereich "WebServer" musste Traefik zum Einsatz kommen da bei einigen Containern die Zertifikatseinbindung nicht ganz funktionierte also wollte ich, bzw. war ich gezwungen auf ein Reverse-Proxy zurückgreifen.
@mafricimangmailaccount66113 жыл бұрын
Can someone please help me understand whether I should be using reverse proxy or VPN for remote access? Both seem to be secure however VPN will encrypt me traffic also. I don't understand VPN well enough to know how it works when accessing different services within the same network similar to how reverse proxy works. Likewise, I don't know enough about reverse proxies to know how secure it is compared to VPN. TIA!
@christianlempa3 жыл бұрын
Use a Reverse Proxy when you want to make web applications accessible, use a VPN if you want to secure the access to your internal/remote networks.
@mafricimangmailaccount66113 жыл бұрын
@@christianlempa can you use both to have secure remote access to the services?
@_TbT_3 жыл бұрын
@@mafricimangmailaccount6611 With SSL (one of the functions of the reverse proxy) you secure the transport of data, with VPN the access to resources.
@mafricimangmailaccount66113 жыл бұрын
@@_TbT_ Aha! Thank you 😁
@danielstellmon53303 жыл бұрын
A self hosted VPN is for securely connecting to your home network from out side said network. Reverse proxy is for when you have multiple services on the same box and don't want to memorize port numbers for each service. There is a lot more to it, but that is a simple place to start.
@sirjenkins7442 Жыл бұрын
I have some basic knowledge of IT and dabble in homeserver for a few services so NPM is more than enough for me.
@Airbag8883 жыл бұрын
You should definitely make a / some videos on traefik setup and administration :)
@christianlempa3 жыл бұрын
Good idea, I think there will be more traefik stuff in the future ;)
@KR1ML0N3 жыл бұрын
i was really thinking the same thing the other day.
@christianlempa3 жыл бұрын
that's funny ;)
@tesses502 жыл бұрын
for me I prefer vanila nginx (don't know how to have static pages with nginx proxy manager) (I do proxy services too but I like regular nginx better)
@bthegawd81133 жыл бұрын
Ngnix proxy manager is what I use in my homelab.
@christianlempa3 жыл бұрын
That's greate man :)
@elalemanpaisa Жыл бұрын
Interesting, I use nginx (not nginx proxy manager) to also serve static files .. config for reverse proxy is dead simple .. like 2 lines in the config file .. sure in k8s you might want something automated yet I was working with dns entries so far.
@testes23902 жыл бұрын
I was trying to test Traefik, but when I tried to run it as a system service(to not use docker) and trying to set up DNS challenge, I could not find any documentation related. So after some hours I gave up, then I tried Caddy 2, and wow, like in 5 minutes, I had everything smoothly running
@christianlempa2 жыл бұрын
Caddy seems nice
@Atchalong Жыл бұрын
Caddy is awesome! I've used it for a few years and it makes the entire reverse proxy process stupid easy.
@vino95872 жыл бұрын
hello sir, I have one question, can NPM run container that have multiple port ?, For example : container A: and container B: Thanks.
@christianlempa2 жыл бұрын
Yes, because you don't need to expose the container's port publicly.
@kurt_hansen2 жыл бұрын
@@christianlempa But what is, if i need the port, e.g. for influxdb i need the port in my application from where i connect to influx. So, i want to use my ssl domain name in addition with a port, is that possible with npm?
@MrSnyaify3 жыл бұрын
Traefik
@christianlempa3 жыл бұрын
Thank you mate! :)
@chrisumali98413 жыл бұрын
Thanks for the info and demo. I use NPM with Authelia so far so good
@christianlempa3 жыл бұрын
Oh that's cool! How are you doing this? Can you send me a DM on discord? ;)
@marchagen38933 жыл бұрын
Treafik in a cluster is a bitch, but once figured out how to takle that issue it works great.! I've a 3 Node Swarm cluster with 3 traefik instances that self load balance :D Do i need it ? No. But it was a great experience to learn how to do it. Small edit: No no etcd or sync stuff just proxy the docker-socket over all nodes with a docker network and attach it to traefik
@christianlempa3 жыл бұрын
Fully agree with you! Cool setup btw :D
@qfrimaa3 жыл бұрын
honey digital life video just dropped
@christianlempa3 жыл бұрын
:D
@yashinshekh802 Жыл бұрын
you are a geek ... amazing video
@neuro52612 жыл бұрын
Am curious about a comparison betwen Traefik Community Edition and NGINX, and between Traefik Enterprise Edition and NGINX. I wonder if Traefik Community Edition has all of the features that NGINX has and more pretty much.
@DeceLatina3 жыл бұрын
I use apache for proxying
@christianlempa3 жыл бұрын
Also nice!
@shetuamin3 жыл бұрын
I use Apache. But now i am looking traefik container.
@christianlempa3 жыл бұрын
Nice
@mayurchavhan85903 жыл бұрын
I'm fan of automation and everything needs to be IaaC for me, Traefik is way to go. If NPM comes with CLI or YAML configuration for more flexibility, i would definitely use it !!
@christianlempa3 жыл бұрын
Absolutely!
@camaycama74793 жыл бұрын
HA proxy is pretty good also, good load balancer too
@christianlempa3 жыл бұрын
I'll take a look 😀 thanks
@virtualizeeverything13 күн бұрын
thank you
@christianlempa13 күн бұрын
You're welcome
@RK-ly5qj Жыл бұрын
For me NPM was better to implement, it has a gui. So i made less mistakes instead of struggling with CLI.
@MarkConstable2 жыл бұрын
FWIW please don't use background music during the main part of your video tutorial (intro, outro is fine). It makes it unreasonable to speed up the video. Even x1.25 is unacceptable.
@christianlempa2 жыл бұрын
Ah, I still like it ;)
@MarkConstable2 жыл бұрын
@@christianlempa Well, I can't stand it, so I have no choice except to unsubscribe.
@nezu_cc3 жыл бұрын
I don't agree with you saying that treafik is poorly documented. In my opinion, the docs have everything you need and the search function works well enough. It might not be "idiot proof" but I consider that to be a good thing. No extra garbage, just values and descriptions of what they do. Everyone's setup is different so trying to make a universal how2 guide is pointless bloat IMO. I personally really like the "here are all the available options, now go build something with it" approach.
@christianlempa3 жыл бұрын
Good documentation for me is that it's idiot proof. When I read docs and often don't understand where to look for and find things, that's not a good sign.
@testes23902 жыл бұрын
@@christianlempa Like DigitalOcean tutorials, they are simply amazing! thanks man for your great tutorials BTW
@UzairAli0012 жыл бұрын
Even though Traefik has more control over reverse proxy, for most of the users NPM is more than enough
@christianlempa2 жыл бұрын
It's not always about "what is enough", but also what you're interested in learning
@evertythingtechrelated97153 жыл бұрын
I think Traefik needs a GUI editor.
@christianlempa3 жыл бұрын
Nah, it's fine without, that would make things even more complicated :D
@marcello42583 жыл бұрын
Poorly documented.. thanks that is all I need to hear. To me, if the software is doing something what I cannot find in the docs (or vice versa) it is a bug nothing else.
@christianlempa3 жыл бұрын
Well it's not that you can't find it. It's just confusing where to find it 🤣
@marcello42583 жыл бұрын
@@christianlempa it should come with the software or at least should point where to find the documentation
@elalemanpaisa Жыл бұрын
You often talk about gaining more knowledge.. wondering why I have never seen any freebsd or openbsd server which def have a place
@squirrel_ca9745 Жыл бұрын
I’m running unRAID with nginx and swag
@IdAefixBE Жыл бұрын
"Nginx is a small open source project that only runs in Docker while Traefik is a cloud native application proxy". Do your research before you say such non-sense. I was using (natively installed) nginx years before docker was even a thing, it never was nor will be a "docker only" thing.
@christianlempa Жыл бұрын
It’s not about nginx, but nginx proxy manager
@anantmishra6783 Жыл бұрын
the bg music is too much bro .. dial it down ffs!!
@christianlempa Жыл бұрын
!!
@famousartguymeme Жыл бұрын
my nginx breaks after every reboot
@NoobSaibot0xFF Жыл бұрын
your background music makes me agressive
@DDlol01 Жыл бұрын
So I want to rant about traefik: I hate it. I use files over labels, because labels take about 20 to 30 seconds to spin up, while the file is done before labels even are done parsing. The commandline options are just ... useless and way worse documented or have (undocumented) side-effects (have fun reading code if you want to figure this stuff out!). Labels and files are somewhat equivalent: labels get turned into "files" (streams). I prefer yaml over toml, but anybody thinking anyone is better over the other doesn't know its just aesthetics (someone begged me to send him toml instead of yaml, i just used an online converter lel). Debug info in traefik is pretty much non existent. `debug: true` yeah... nah, does not do anything except slowing down your traffic and sometimes even bugging it lel. You will not get useful information: - Why it is ignoring your certificates - Why it will just not connect to the service associated by `HostSNI` (with ssl passthrough, cuz the server has certificate level authentication) - why does it connect to a completely different service, just because they are on the same ip (as seen form the outside world) but wildly different HostNames - Why does it pretend dynamic.yaml does not exist EXCEPT FOR A SINGLE RULE It will not even tell you that a connection was closed, simply because the service killed the upstream right before it was assigned and before it was acknowledged as dead (nginx handles this?) I like the web ui of traefik, it is very informative, but i will invest my time and source code to nginx-proxy-manager. I guess it could replace traefik with a few tweaks. ssl_preread is required for my application... not yet supported (properly) by either. P.S.: Why is the logging and verbosity of traefik _so_ _frickin_ *bad* ?
@Darkhan99 ай бұрын
Nothing beats nginx (not nginx proxy manager but the oldschool nginx proxy).