🔀Traefik Proxy

https://traefik.io/traefik/

All reverse proxy configurations for all docker swarm services are configured with docker labels which can seen in service's docker-stack.yml

Deploy

https://github.com/veerendra2/raspberrypi-homeserver/tree/main/services/traefikv2github.com

Traefik Docker Swarm Stack

$ git clone [e-mail]:veerendra2/raspberrypi-homeserver.git
$ cd services/traefikv2
# create docker swarm overlay networks
$ docker stack deploy -c network.yml network
# deploy traefik reverse proxy
$ docker stack deploy -c docker-stack.yml traefikv2

Configuration

Networking

All docker swarm overlay network predefined in network.yml. Some networks are enable internal: true (Restricted to external access to the network. More info)

Network Range	Network Name	Internal
172.16.204.0/24	network_private	Yes
172.16.200.0/24	network_public	No
172.16.201.0/24	network_monitoring	No
172.16.202.0/24	network_databases	No

Self-Signed SSL

Traefik creates default certificates while it bootstraps. Custom certificates can placed in services/traefikv2/config/ssl, add in services/traefikv2/config/dynamic.toml and [providers.file] section in services/traefikv2/config/traefik.toml

ACME

Refer below blog post

Traefik HTTPS Config with DuckDNS for Local HomeserverVeerendra's Blog