Docker compose and configuration to setup traefik ingress for web traffic
This docker-compose.yml uses traefik - "The Cloud Native Edge Router".
Traefik is a reverse proxy / load balancer that's easy, dynamic, automatic, fast, full-featured, open source, production proven, provides metrics, and integrates with every major cluster technologies... No wonder it's so popular!
The configuration bases on docs that can be found on the traefik project website - Docker-compose with let's encrypt : HTTP Challenge
- Use Traefik as a layer-7 load balancer
- SSL termination for a set of micro-services and/or web apps
- Automatic discovery of any services on the Docker host
- Traefik reconfigure itself automatically when containers get created (or shut down)
- HTTP traffic can be routed accordingly based on automatic reconfiguration
- Let's Encrypt to automatically generate and renew SSL certificates per hostname
- Server with public IP
- Install latest Docker (i.e. Get Docker CE for Ubuntu)
- Install latest Docker Compose
- Configure your domain to point to your IP, i.e.
my-test-domain.com
- use also wildcard
CNAME
*
is an aliasmy-test-domain.com
- use also wildcard
Now create directory for traefik:
cd ~
mkdir sites
cd sites
git clone https://github.com/bitroniq/docker-compose-traefik.git
cd docker-compose-traefik
The docker-compose.yml
provides simple way to create immutable Traefik container.
All configration is provided inside docker-compose.yml
Mounting the /var/run/docker.sock
Docker socket in the container allows Traefik to listen to Docker events and reconfigure its own internal configuration when containers are created (or shut down).
- Replace [email protected] by your own email within the
certificatesresolvers.myresolver.acme.email
command line argument of the traefik service. - Replace
whoami.example.com
by your own domain within thetraefik.http.routers.whoami.rule
label of the whoami service. - Optionally uncomment the following lines if you want to test/debug:
#- "--log.level=DEBUG"
#- "--certificatesresolvers.myresolver.acme.caserver=https://acme-staging-v02.api.letsencrypt.org/directory"
To boot the container from the ~/sites/docker-compose-traefik
directory, run:
docker-compose up -d
Now you can open your browser and go to http://localhost:8080
to see the Traefik Dashboard.
root@ubuntu-s-1vcpu-1gb-amd-fra1-01:~/docker-compose-traefik# docker-compose logs -f
Attaching to simple-service, traefik
simple-service | 2022/11/15 12:26:52 Starting up on port 80
traefik | time="2022-11-15T12:26:52Z" level=info msg="Configuration loaded from flags."
The only things that must be changed in typical docker-compose.yml
are:
- to remove the ports exposing definitions (Traefik will expose what is needed automatically)
- add traefik labels - Traefik needs to know which Layer 7
Host
must be used for routing traffic
Example - Simple apache docker-compose.yml
:
version: '2'
services:
apache:
image: 'bitnami/apache:latest'
labels:
- "traefik.enabled=true"
- "traefik.frontend.rule=Host:fileserver.my-test-domain.com"
volumes:
- ./html:/app
restart: always
The easiest way is to redirect to HTTPS globally. Once configured all your running services will use it.
The configuration of Traefik is displayed in the following code block.
The web entrypoint additionally has a redirection to the websecure entrypoint.
The scheme is defined as https, a predefined scheme by Traefik which automatically turns HTTP into HTTPS.
This results in all traffic coming in at port 80 being redirected to port 443 - the default HTTPS port.
traefik:
...
command:
...
- "--entrypoints.web.address=:80"
- "--entrypoints.websecure.address=:443"
- "--entrypoints.web.http.redirections.entrypoint.to=websecure"
- "--entrypoints.web.http.redirections.entrypoint.scheme=https"
...
v2.0 - 2022-11-15
- Updated Screenshots
- Updated docker-compose
- Upgrade to Traefik 2.9
v1.1 - 2018-07-17
- Fixed some typos
- Something
v1.0 - 2018-07-17
- Some typos
Piotr Kowalski โ @YourTwitter โ [email protected]
Distributed under the GNU GPL license. See LICENSE
for more information.
https://github.com/bitroniq/docker-compose-traefik
- Fork it (https://github.com/bitroniq/docker-compose-traefik/fork)
- Create your feature branch (
git checkout -b feature/fooBar
) - Commit your changes (
git commit -am 'Add some fooBar'
) - Push to the branch (
git push origin feature/fooBar
) - Create a new Pull Request