Skip to content

Latest commit

 

History

History
150 lines (118 loc) · 4.84 KB

project_usage.md

File metadata and controls

150 lines (118 loc) · 4.84 KB

Instructions how to add new app to existing Traefik environment

Requirements

  • app has to be dockerized

Setup

  1. Declare a traefik network in your docker-compose file
# docker-compose.yml
networks:
    traefik-proxy-blumilk-local:
        external: true
  1. Add this network only to the container which serves your application (nginx, apache, or other built-in servers, etc.)
# docker-compose.yml
services:
    your-service:
        networks:
            - traefik-proxy-blumilk-local
  1. Add labels to the docker compose service
# docker-compose.yml
services:
    your-service:
        labels:
            - "traefik.enable=true"
            - "traefik.blumilk.environment=true"
            # HTTP
            - "traefik.http.routers.NAME-http-router.rule=Host(`DOMAIN.blumilk.localhost`)"
            - "traefik.http.routers.NAME-http-router.entrypoints=web"
            # MIDDLEWARES
            #- "traefik.http.routers.NAME-http-router.middlewares=https-redirect@file"
            # HTTPS
            - "traefik.http.routers.NAME-https-router.rule=Host(`DOMAIN.blumilk.localhost`)"
            - "traefik.http.routers.NAME-https-router.entrypoints=websecure"
            - "traefik.http.routers.NAME-https-router.tls=true"

Where NAME should be replaced with your app name slug (no spaces) and DOMAIN should be replaced with an app name that you'll use in url, e.g.: if DOMAING is set to my-app then your app will be accessible with: my-app.blumilk.localhost.

You can also use .env file to provide domain name, e.g.:

# docker-compose.yaml
- "traefik.http.routers.NAME.rule=Host(`${YOUR_APP_HOST_NAME}`)"
# .env file

YOUR_APP_HOST_NAME=my-app.blumilk.localhost

Notes:

  • Traefik, by default, won't redirect HTTP traffic to HTTPS. To enable this, uncomment:
    - "traefik.http.routers.NAME-http-router.middlewares=https-redirect@file"

  • If you don't need to use Traefik to redirect traffic to your app, either remove traefik.enabled label or set it to false:

- "traefik.enable=false"

you can also remove traefik-proxy-blumilk-local network.

  • Traefik terminates TLS, so internal traffic to your container will be served as HTTP not HTTPS, sometimes this needs to set up trusted proxies in your app.

  • Traefik will automatically detect exposed, (not published) ports and use the first one. If your app exposes more than one port, you need to specify which Traefik should use to redirect traffic correctly. To do this, you can use a label:

- "traefik.http.services.NAME.loadbalancer.server.port=9000"

Where NAME is your app name slug and 9000 is the expected port.

Examples

HTTP only

services:
    your-service:
        labels:
            - "traefik.enable=true"
            - "traefik.blumilk.environment=true"
            # HTTP
            - "traefik.http.routers.NAME-http-router.rule=Host(`DOMAIN.blumilk.localhost`)"
            - "traefik.http.routers.NAME-http-router.entrypoints=web"

HTTPS only (no access over HTTP)

services:
    your-service:
        labels:
            - "traefik.enable=true"
            - "traefik.blumilk.environment=true"
            # HTTPS
            - "traefik.http.routers.NAME-https-router.rule=Host(`DOMAIN.blumilk.localhost`)"
            - "traefik.http.routers.NAME-https-router.entrypoints=websecure"
            - "traefik.http.routers.NAME-https-router.tls=true"

HTTP and HTTPS (no auto redirection from HTTP to HTTPS)

services:
    your-service:
        labels:
            - "traefik.enable=true"
            - "traefik.blumilk.environment=true"
            # HTTP
            - "traefik.http.routers.NAME-http-router.rule=Host(`DOMAIN.blumilk.localhost`)"
            - "traefik.http.routers.NAME-http-router.entrypoints=web"         
            # HTTPS
            - "traefik.http.routers.NAME-https-router.rule=Host(`DOMAIN.blumilk.localhost`)"
            - "traefik.http.routers.NAME-https-router.entrypoints=websecure"
            - "traefik.http.routers.NAME-https-router.tls=true"

HTTP and HTTPS (auto redirection from HTTP to HTTPS)

# docker-compose.yml
services:
    your-service:
        labels:
            - "traefik.enable=true"
            - "traefik.blumilk.environment=true"
            # HTTP
            - "traefik.http.routers.NAME-http-router.rule=Host(`DOMAIN.blumilk.localhost`)"
            - "traefik.http.routers.NAME-http-router.entrypoints=web"
            # MIDDLEWARES
            - "traefik.http.routers.NAME-http-router.middlewares=https-redirect@file"
            # HTTPS
            - "traefik.http.routers.NAME-https-router.rule=Host(`DOMAIN.blumilk.localhost`)"
            - "traefik.http.routers.NAME-https-router.entrypoints=websecure"
            - "traefik.http.routers.NAME-https-router.tls=true"