TRAEFIK - the BEST reverse proxy? The Ultimate Setup Guide with Docker & Let's Encrypt

• Traefik DNS challenge ... DNS challenge and wildcard certificates with traefik!
#traefik is the ultimate reverse proxy tool!
In this video I'll show you what Traefik is, how it works, how you set it up, and how a live demo looks like.
The live demo show what the traefik dashboard looks like and how to deploy another docker container behind the reverse proxy. I am using #plausible analytics here.
Traefik uses let's encrypt for certificates and manages them automatically!
*Get 200$ worth of credits in the Digital Ocean Cloud: link.techwithmarco.com/digita... (*)
--
🔐 If you want to improve your security stack even more, head over to my newest video about using a docker-socket-proxy instead of using it directly mounted from the host system!
• Traefik security issue...
--
00:00 - 00:24 Intro
00:25 - 03:21 What is Traefik
03:22 - 05:29 The concept of traefik
05:30 - 12:27 How to use traefik
12:28 - 12:59 Deployment
13:00 - 14:26 Demo time
14:27 - 14:52 Outro
Here you can find the tutorials files on my github:
github.com/marcogreiveldinger...
traefik.io/traefik/
plausible.io/
letsencrypt.org/
-----
Github: github.com/marcogreiveldinger
Become a supporter with Patreon: / techwithmarco
#traefik #plausible #reverseproxy #letsencrypt
--------------------------
(*) -links are affiliate links. (If you buy something through the link, I receive a commission of your purchases. There are no extra costs for you.)

[@unmatal]

Thanks a lot man. I have tried many guides, created by many ppl. Yours the one was the most simplest, and yours the one I was able to run with no hassle. Good work man. Much obliged

[@techwithmarco]

Glad to hear that :-)

[@Ismoh0815]

fully agree!

[@gideonyeboahasante8886]

Great video. Thank you.

[@techwithmarco]

Thanks mate!

[@ThomsBe]

Thanks for this video. The one thing which makes traefik so special and the best proxy for docker: The static config is simple and fits in a few lines. The dynamic part is truly dynamic. You can add, change and remove routings without restarting traefik. Even other docker stacks on the same machine need only a network and labels. Define web and websecure and you can add hostnames with certificates from different providers without restarting. Try this with any of the "webserver used as reversproxies" approaches. You should mention this in the intro or more often. Second thing: You should take a look at a docker-socket-proxy since you should not mount the socket inside your entry from the outside for security reasons. There is a simple proxy wich is used by some traefik powered projects.

[@techwithmarco]

Thanks for your input! :) And I'll take a look at the docker-socket-proxy. I am aware that it is not ideal, but I was not aware that there seems to be a neat solution to this :-)

[@techwithmarco]

Hey, I had a look at the docker-socket-proxy and made a short update video for that 🙂 kzbin.info/www/bejne/mIDQn56Ajttmb68

[@techwithmarco]

Thanks for tuning in! I hope you enjoyed the Traefik tutorial. If you want to support me, demonstrating stuff in the clouds, you can try the digital ocean cloud with 200$ worth of credits if you use my link to sign up (for free of course!). link.techwithmarco.com/digitalOcean Thanks ------- 🔐If you want to improve your security stack even more, head over to my newest video about using a docker-socket-proxy instead of using it directly mounted from the host system! kzbin.info/www/bejne/mIDQn56Ajttmb68

[@vanhussen]

it's work! thank you from Indonesia

[@icorrelatetech1864]

Create a playlist for Traefik please :D Good Job and Keep it up!

[@techwithmarco]

Thanks a lot! I definitely want to produce more Traefik content as I love it so much :-D

[@techwithmarco]

Just that you know, another Traefik video just went online 🙂 kzbin.info/www/bejne/kGOWc32oh7KIg5Y

[@primenetwork27]

Greate video . But i have problem how do i reserve proxy outside in docker

[@BrazenNL]

When presenting, enlarging type (your VS Code window) is not a bad thing. Lots of people consume media on a smaller screen nowadays.

[@Darkhellwings]

Very good video ! Still I have a question, how does traefik know what port should it route the requests to. For instance, you never told it to especially route to port 8080 for the dashboard.

[@techwithmarco]

Hey @Saufolein, thanks for the comment! This works as this is a traefik specific feature or configuration which you have to follow according to the docs. Check it out here: doc.traefik.io/traefik/operations/dashboard/ In my example I activated '"--api.dashboard=true"' which means, traefik is exposing the dashboard. In order to view it via an url, you have to define a router attached to a specific service named 'api@internal' (this is how it just works according to the docs), and then you can map the router to a host rule, which in my case is 'traefik.example.com' We don't have to expose any port manually as traefik knows how to route the request to the api@internal service automatically. I hope this makes it a bit more clear to you :-)

[@Gr4ph1xZ]

Can i also use traefik to expose not a container but instead a internal ip (a other vm) and put https externaly to it? :)

[@jakubcihanek]

Hi, thanks a lot for the tutorial. Iam thinking about switching from nginx proxy manager to traefik and your video helped me a lot to get it working. Is there a possibility to expose not only docker container but also other things on the network running on different devices using local ip and port of the service? NAS, Homeassistant, router...etc?

[@techwithmarco]

It is possible to export other services, have a look in the docs of traefik. doc.traefik.io/traefik/providers/overview/ You could use for example http, to expose another local network address

[@RektaWasHere]

Did the plausible subdomain already exist beforehand or is there something for treaefik to create it automatically ?

[@techwithmarco]

Sorry for the late response.. The subdomain already existed beforehand. You can see how I create them automatically with terraform and github actions. kzbin.info/www/bejne/ZnOxqHR7rL6NoqM There are also a bunch of other different ways to achieve the automatic creation. For example there is a docker container which works together with traefik which registers that traefik has a new subdomain configured and then creates the subdomain on your cloudflare account (github.com/tiredofit/docker-traefik-cloudflare-companion) Or you could also use some wildcard certificates, but for that you have to use dns-challenge.

[@onthefarm88]

Is there a more simple approach if I only want the reverse proxy in my local network? I don't want to expose anything to the internet.

[@techwithmarco]

Yes, you can for sure just play with it in your local network without exposing anything to the world. If you want to use let's say some subdomains like 'service.raspberrypi.local' you would need a local dns server to resolve those addresses in your network automatically. This can be done with PiHole for example. Then you could also benefit from using ssl certs on your local network. I haven't done it yet, but there are also some guides about that on the internet :)

[@onthefarm88]

@@techwithmarco If I have multiple services accessible from different ports on the same server, would pihole be able to handle this on its own or would I need Traefik to handle the addresses resolving to different ports?

[@techwithmarco]

You could use traefik for that, but you could also directly access the your services at their port. I am not completely sure about your setup, so my answers might not be accurate about your problem 😄

[@TheOnlyEpsilonAlpha]

Very nice explaination, but there is one detail which is a bit annoying to hear: in the "Demo Time" Chapter when you type something in, it sounds on my headphones like you smack the microphone.

[@techwithmarco]

Thank you very much! and thanks for the hint, I was not aware of how this could be for people with headphones... I just thought its a bit like ASMR content smashing the keyboard :-D But I will more careful in the next videos :-)

[@TheOnlyEpsilonAlpha]

@@techwithmarco Thank you 🙏