# traefik Published articles for traefik. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Running a Self-Hosted Tailscale Control Server Behind a Reverse Proxy DevFeed: [Running a Self-Hosted Tailscale Control Server Behind a Reverse Proxy]() Original publisher: [Read original article]() Author: Philipp Lehmann (philipp.lehmann@gruppe.ai) Published: 2026-09-15T07:00:00Z Content type: tutorial Language: en Sources: [Philipp Lehmann]() Topics: [tailscale](), [proxy](), [traefik](), [TLS (Transport Layer Security)](), [TLS handshake](), [Self-hosted](), [Homelab]() Tags: [dns](), [docker](), [h2](), [homelab](), [networking](), [proxy](), [reverse-proxy](), [security](), [self-hosted](), [tailscale](), [tls](), [tls-handshake](), [traefik]() ### AI overview This tutorial explains how to run a self-hosted Tailscale control server, Headscale, behind Traefik. It finds that the reverse proxy must use TLS with HTTP/1.1 only because Tailscale's noise handshake expects a full-duplex byte stream and can fail when ALPN negotiates HTTP/2. ### Source excerpt Headscale behind Traefik: tls.options=no-h2@file with alpnProtocols http/1.1, because the Tailscale noise handshake breaks when ALPN negotiates h2. ## Caddy: proxy inverso con HTTPS automático DevFeed: [Caddy: proxy inverso con HTTPS automático]() Original publisher: [Read original article]() Author: Antonio Pérez Published: 2026-08-06T00:00:00Z Content type: tutorial Language: es Sources: [tengoping.com]() Topics: [proxy](), [TLS (Transport Layer Security)](), [let's encrypt](), [nginx](), [traefik](), [Go]() Tags: [debian](), [fedora](), [go](), [let-s-encrypt](), [nginx](), [proxy](), [rhel](), [systemd](), [tls](), [traefik](), [ubuntu]() ### AI overview This Spanish tutorial explains how Caddy works as a Go-based reverse proxy with automatic HTTPS certificate issuance and renewal through Let's Encrypt or ZeroSSL. It compares Caddy with Nginx and Traefik, then covers installation and basic Caddyfile configuration. ### Source excerpt Caddy emite y renueva certificados HTTPS automáticamente vía Let's Encrypt sin tocar Certbot: Caddyfile, requisitos y comparativa con Nginx y Traefik. ## Traefik: proxy inverso para contenedores DevFeed: [Traefik: proxy inverso para contenedores]() Original publisher: [Read original article]() Author: Antonio Pérez Published: 2026-08-03T00:00:00Z Content type: tutorial Language: es Sources: [tengoping.com]() Topics: [traefik](), [Docker](), [proxy](), [let's encrypt](), [Docker Compose](), [TLS (Transport Layer Security)]() Tags: [docker](), [docker-compose](), [let-s-encrypt](), [proxy](), [tls](), [traefik]() ### AI overview This tutorial explains how Traefik acts as a reverse proxy for Docker containers. It covers automatic container discovery through Docker labels, routing with entryPoints, routers, and services, and automatic HTTPS certificates through Let's Encrypt. It also compares Traefik with manually configured Nginx and mentions Caddy as an alternative. ### Source excerpt Traefik detecta tus contenedores Docker automáticamente y les da HTTPS con Let's Encrypt vía labels, sin tocar un fichero de configuración. ## Keycloak 26.7.0 released DevFeed: [Keycloak 26.7.0 released]() Original publisher: [Read original article]() Author: Keycloak Team Published: 2026-07-09T00:00:00Z Content type: release Language: en Sources: [Keycloak Blog]() Topics: [Keycloak](), [API](), [Authentication](), [Authorization](), [Security](), [OAuth 2.0](), [saml]() Tags: [api](), [authentication](), [authorization](), [deprecated](), [haproxy](), [high-availability](), [idm](), [kerberos](), [keycloak](), [keycloak-release](), [ldap](), [oauth](), [oauth-2-0](), [openid-connect](), [persistence](), [provisioning](), [release](), [saml](), [security](), [sso](), [traefik]() ### AI overview Keycloak 26.7.0 introduces preview support for SCIM-based user provisioning and simplified multi-cluster high availability, along with enhanced HAProxy and Traefik reverse-proxy guidance and step-up authentication for SAML clients. The release also adds a more secure, OAuth 2.0-compliant Identity Brokering API v2, while V1 remains enabled by default but is deprecated. OID4VCI improvements remain experimental. ### Source excerpt To download the release go to Keycloak downloads. Highlights This release features new capabilities for users and administrators of Keycloak. The highlights of this release are: Automate user provisioning with the SCIM API (preview) Simplified multi-cluster high availability without external caches (preview) Enhanced reverse proxy guides with blueprints for HAProxy and Traefik Step-up authentication for SAML clients Read on to learn more about each new feature. If you are upgrading from a previous release, also review the changes listed in the upgrading guide. Security and Standards Stronger security for the Identity Brokering API The Identity Brokering API allows applications to retrieve tokens obtained from external identity providers during federated login. Version 2 of this API replaces the legacy V1 with a more secure and standards-compliant design: Client-level authorization -- access to external tokens is controlled per client using dedicated settings (Allow retrieve external tokens and an identity provider allow list) instead of assigning broker roles to individual users. Confidential clients only -- public clients are rejected, ensuring that only authenticated clients can retrieve external tokens. OAuth 2.0 compliant -- the endpoint uses POST and returns standard JSON responses with access_token, error, and error_description fields. Session-based token storage -- a new Store token in session option keeps tokens in the user session for faster access, with automatic cleanup on session expiry. Database storage remains available for persistence across sessions. V2 is now supported but disabled by default. V1 is deprecated but still enabled by default for backward compatibility. In a future release, V1 will be removed and V2 will become the default. For more information, see the Identity Brokering APIs chapter in the Server Developer Guide. Progress on Verifiable Credentials (OID4VCI) (experimental) Verifiable Credentials (OID4VCI) allow organizations to issue tampe ## Kubernetes 网络深度系列 DevFeed: [Kubernetes 网络深度系列]() Original publisher: [Read original article]() Author: Liao Tonglang Published: 2026-04-03T00:00:00Z Content type: tutorial Language: zh Sources: [土法炼钢 - 系统与基础设施]() Topics: [Kubernetes](), [Linux](), [eBPF](), [VXLAN](), [gateway](), [nginx](), [traefik](), [Grafana]() Tags: [ebpf](), [gateway](), [grafana](), [index](), [k8s](), [kubernetes](), [linux](), [net-11](), [networking](), [nginx](), [return](), [series](), [service-mesh](), [traefik](), [vxlan]() ### AI overview A Chinese tutorial series explains Kubernetes networking from the Linux network stack through virtual devices, routing, tunnels, eBPF, CNI plugins, Services, security policies, service discovery, traffic management, performance tuning, and troubleshooting. It includes packet captures, code, and kernel-source references, with comparisons of major CNI and ingress approaches. ### Source excerpt 从 Linux 网络栈的第一个字节到多集群联邦网络的最后一跳----用代码、抓包和内核源码把 Kubernetes 网络讲透 ## Open Source as a Way of Giving Back: The Artisan of the Day Is Daniel Petrica. DevFeed: [Open Source as a Way of Giving Back: The Artisan of the Day Is Daniel Petrica.]() Original publisher: [Read original article]() Author: Ana Tavares Published: 2025-12-19T14:10:00Z Content type: article Language: en Sources: [Laravel Blog]() Topics: [Laravel](), [Open Source](), [PHP](), [Software as a service](), [DevOps](), [Front end](), [Monitoring](), [Docker Compose]() Tags: [backend](), [career](), [development](), [devops](), [docker](), [framework](), [frontend](), [knowledge-sharing](), [laravel](), [monitoring](), [open-source](), [php](), [programming](), [projects](), [saas](), [tools](), [traefik]() ### AI overview Daniel Petrica describes how Laravel became the foundation of his programming career and enabled him to build products across industries. He also discusses LaraPlugins.io, open-source contributions, technical knowledge sharing, and his broad freelance work across backend development, DevOps, monitoring, and frontend tooling. ### Source excerpt Daniel Petrica shares how Laravel shaped his career, from real estate portals to new SaaS projects and open-source contributions as a full-time freelancer. ## Using Coolify for subdomain direct redirect without a app resource DevFeed: [Using Coolify for subdomain direct redirect without a app resource]() Original publisher: [Read original article]() Author: Julien Published: 2025-09-14T19:07:33Z Content type: tutorial Language: en Sources: [Thoughts, stories and ideas.]() Topics: [proxy](), [Redirection](), [YAML](), [configuration](), [TLS (Transport Layer Security)](), [interface]() Tags: [coolify](), [devops](), [dns](), [habits](), [proxy](), [ssl](), [tls](), [traefik](), [yaml]() ### AI overview A tutorial showing how to use Coolify's dynamic proxy configuration to redirect a subdomain to an external URL without creating a full application resource. It uses a YAML configuration with Traefik to define the redirect, router, TLS handling, and required dummy service. ### Source excerpt Coolify's dynamic proxy configuration lets you redirect subdomains to external URLs without creating full resources. Using a simple YAML file with Traefik configuration, you can set up SSL-enabled redirects directly through Coolify's interface. ## Running Docker and Home Assistant on TrueNAS with Compose, macvlan, and Traefik DevFeed: [Running Docker and Home Assistant on TrueNAS with Compose, macvlan, and Traefik]() Original publisher: [Read original article]() Author: Techno Tim Published: 2025-07-14T13:00:00Z Content type: tutorial Language: en Sources: [Techno Tim]() Topics: [Docker](), [truenas](), [Docker Compose](), [YAML](), [Home Assistant](), [traefik](), [Self-hosted](), [Networks]() Tags: [compose](), [containers](), [docker](), [home-assistant](), [homelab](), [how-to](), [networks](), [self-hosted](), [self-hosting](), [traefik](), [truenas](), [yaml]() ### AI overview A tutorial for running Docker applications on TrueNAS using YAML and Docker Compose. It covers creating datasets, optionally managing services through Code Server, and configuring Home Assistant with macvlan networking and Traefik for device discovery and reverse-proxy access. ### Source excerpt Learn how to run Docker apps on TrueNAS like a pro -- with full control, clean YAML, and no extra dashboards. Have questions or a different setup that works for you? Leave a comment, I'd love to hear how others are running Docker on TrueNAS. 📺 Watch Video Starting with TrueNAS 25.10, you will need to add a services key to your custom yaml for new stacks and when updating your existing s... ## Kamal 2.0 released DevFeed: [Kamal 2.0 released]() Original publisher: [Read original article]() Author: Donal McBreen Published: 2024-09-26T17:00:00Z Content type: release Language: en Sources: [37signals Dev]() Topics: [Deployment](), [proxy](), [configuration](), [let's encrypt](), [Web](), [Rails](), [traefik]() Tags: [configuration](), [deploy](), [deployment](), [let-s-encrypt](), [maintenance](), [password](), [rails](), [secrets](), [traefik](), [upgrade](), [web-apps]() ### AI overview 37signals announces Kamal 2.0, a deployment tool for running web applications on virtual machines or bare-metal servers. The release adds kamal-proxy for gapless deployments, automatic HTTPS with Let's Encrypt, multi-application deployment on one server, command aliases, and simplified secret management. ### Source excerpt Making deployments simpler and faster. ## How to Self-Host Your Own Private AI Stack DevFeed: [How to Self-Host Your Own Private AI Stack]() Original publisher: [Read original article]() Author: Techno Tim Published: 2024-07-08T13:00:00Z Content type: tutorial Language: en Sources: [Techno Tim]() Topics: [Artificial Intelligence](), [Self-hosted](), [Local AI](), [Docker Compose](), [Ollama](), [traefik](), [Ubuntu]() Tags: [ai](), [docker](), [homelab](), [how-to](), [ollama](), [self-hosted](), [self-hosted-ai](), [traefik](), [ubuntu]() ### AI overview A tutorial for running a local, private, self-hosted AI stack. It covers hardware considerations, Ubuntu Server 24.04 LTS, NVIDIA drivers, Docker Compose services, Traefik reverse-proxy access, internal DNS, and optional basic authentication for Ollama. ### Source excerpt In this tutorial we'll walk through my local, private, self-hosted AI stack so that you can run it too. 📺 Watch Video Disclosures Nothing in this video was sponsored Info If you're looking for the overview of this stack, you can out the video here Self-Hosted AI That's Actually Useful Hardware Machine Used for AI: Building My ULTIMATE, All-inOne, HomeLab Server GPUs Here are ... ## Traefik 3 Wildcard Certificates with Docker, Let's Encrypt, and Cloudflare DevFeed: [Traefik 3 Wildcard Certificates with Docker, Let's Encrypt, and Cloudflare]() Original publisher: [Read original article]() Author: Techno Tim Published: 2024-04-30T13:00:00Z Content type: tutorial Language: en Sources: [Techno Tim]() Topics: [traefik](), [Docker](), [Tutorial](), [Cloudflare](), [Docker Compose](), [Homelab](), [Self-hosted](), [Pi-hole]() Tags: [certificates](), [cloudflare](), [compose](), [dns](), [docker](), [homelab](), [how-to](), [self-hosted](), [traefik](), [tutorial]() ### AI overview A tutorial showing how to configure Traefik 3 in Docker to obtain Let's Encrypt wildcard certificates using Cloudflare DNS, then use local DNS to route internal self-hosted services through those certificates. ### Source excerpt In today's Traefik tutorial we'll get FREE Wildcard certificates to use in our HomeLab and with all of our internal self-hosted services. We're going to set up Traefik 3 in Docker and get Let's Encrypt certificates using Cloudflare as our DNS Provider (we'll cover how to set up others too). Then we'll configure local DNS using PiHole (or any other local DNS) to route to our services that are ... ## Wildcard Certificates with Traefik + cert-manager + Let's Encrypt in Kubernetes Tutorial DevFeed: [Wildcard Certificates with Traefik + cert-manager + Let's Encrypt in Kubernetes Tutorial]() Original publisher: [Read original article]() Author: Techno Tim Published: 2022-08-06T14:00:00Z Content type: tutorial Language: en Sources: [Techno Tim]() Topics: [Kubernetes](), [traefik](), [Tutorial](), [TLS (Transport Layer Security)](), [Cloudflare](), [Cloud]() Tags: [cloudflare](), [helm](), [ingress](), [kubernetes](), [load-balancer](), [tls](), [traefik](), [tutorial]() ### AI overview A step-by-step tutorial for configuring Traefik as a Kubernetes Ingress Controller, installing cert-manager, and using Cloudflare DNS challenges with Let's Encrypt to automatically provision TLS and wildcard certificates. ### Source excerpt Traefik, cert-manager, Cloudflare, and Let's Encrypt are a winning combination when it comes to securing your services with certificates in Kubernetes.Today, we'll install and configure Traefik, the cloud native proxy and load balancer, as our Kubernetes Ingress Controller.We'll then install and configure cert-manager to manage certificates for our cluster.We'll set up Let's Encrypt as our Clu... ## Open Source & Collaborative Security with CrowdSec and Traefik - CrowdSec & Traefik Tutorial DevFeed: [Open Source & Collaborative Security with CrowdSec and Traefik - CrowdSec & Traefik Tutorial]() Original publisher: [Read original article]() Author: Techno Tim Published: 2022-02-12T13:00:00Z Content type: tutorial Language: en Sources: [Techno Tim]() Topics: [traefik](), [Security](), [Self-hosted](), [Homelab]() Tags: [api](), [community](), [free](), [homelab](), [open-source](), [proxy](), [security](), [traefik](), [tutorial]() ### AI overview A tutorial explains how to use CrowdSec with the Traefik reverse proxy to detect and block threats, share threat signals, and manage bans through a self-hosted setup. It also considers CrowdSec as a possible alternative to fail2ban. ### Source excerpt CrowdSec is a free, open-source and collaborative IPS. Analyze behaviors, respond to attacks & share signals across the community.With CrowdSec, you can set up your own intrusion detection system that parses logs, detects and blocks threats, and shares bad actors with the larger CrowdSec community.It works great with a reverse proxy like traefik to help keep hackers at bay.Could this be a v... ## Installing Grafana Loki with Helm on Kubernetes DevFeed: [Installing Grafana Loki with Helm on Kubernetes]() Original publisher: [Read original article]() Author: Techno Tim Published: 2021-11-20T12:00:00Z Content type: tutorial Language: en Sources: [Techno Tim]() Topics: [Grafana](), [Kubernetes](), [telemetry](), [Package manager](), [Prometheus]() Tags: [config](), [grafana](), [helm](), [how-to](), [install](), [kubernetes](), [logs](), [loki](), [persistence](), [prometheus](), [traefik](), [upgrade]() ### AI overview A tutorial on installing Grafana Loki on Kubernetes using Helm, including a Grafana, Prometheus, and Loki stack, persistent storage, dashboard access, Traefik configuration, LogQL queries, and upgrades. ### Source excerpt In my previous video (Meet Grafana LOKI, a log aggregation system for everything and post, I promised that I would also explain how to install Granfana Loki on Kubernetes using helm.If you're looking to set this up in docker-compose, be sure to check out this video Installing helm Think of helm as a package manager for kubernetes. It'a an easy way to bundle and deploy config to kubernetes wit... ## 2 Factor Auth and Single Sign on with Authelia DevFeed: [2 Factor Auth and Single Sign on with Authelia]() Original publisher: [Read original article]() Author: Techno Tim Published: 2021-06-05T14:00:00Z Content type: tutorial Language: en Sources: [Techno Tim]() Topics: [traefik](), [Open Source](), [Portainer](), [configuration](), [nginx]() Tags: [auth](), [configuration](), [open-source](), [portainer](), [proxy](), [traefik]() ### AI overview A tutorial on configuring Authelia with Portainer and Traefik to add single sign-on, two-factor authentication, and brute-force protection to reverse-proxy endpoints. ### Source excerpt Authelia is an open source Single Sign On and 2FA companion for reverse proxies.It helps you secure your endpoints with single factor and 2 factor auth.It works with Nginx, Traefik, and HA proxy.Today, we'll configure Authelia with Portainer and Traefik and have 2 Factor up and running with brute force protection! 📺 Watch Video Traefik Authelia will work with other reverse proxies but I us... ## Configure Traefik and Portainer with Let's Encrypt wildcard SSL certificates DevFeed: [Configure Traefik and Portainer with Let's Encrypt wildcard SSL certificates]() Original publisher: [Read original article]() Author: Techno Tim Published: 2021-04-24T14:00:00Z Content type: tutorial Language: en Sources: [Techno Tim]() Topics: [traefik](), [Portainer](), [SSL](), [hosting]() Tags: [certificates](), [guide](), [hosting](), [how-to](), [portainer](), [proxy](), [ssl](), [traefik]() ### AI overview A tutorial on configuring Traefik and Portainer as a reverse proxy to obtain wildcard certificates from Let's Encrypt and use SSL for internal and external services. ### Source excerpt Today, we're going to use SSL for everything.No more self-sign certs.No more http.No more hosting things on odd ports.We're going all in with SSL for our internal services and our external services too.We going to set up a reverse proxy using Traefik, Portainer, and use that to get wildcard certificates from Let's Encrypt. Join me and let's secure all the things. 📺 Watch Video Looking fo... ## Configuring Traefik 2 Ingress for Kubernetes DevFeed: [Configuring Traefik 2 Ingress for Kubernetes]() Original publisher: [Read original article]() Author: Techno Tim Published: 2021-04-08T14:00:00Z Content type: tutorial Language: en Sources: [Techno Tim]() Topics: [traefik](), [Kubernetes](), [k3s](), [rancher](), [Cloudflare]() Tags: [certificates](), [cloudflare](), [helm](), [high-availability](), [homelab](), [ingress](), [k3s](), [kubernetes](), [rancher](), [self-hosting](), [ssl](), [traefik](), [tutorial]() ### AI overview A tutorial for configuring Traefik 2 as the ingress controller on a highly available k3s Kubernetes cluster, including Rancher compatibility, external load balancing, and wildcard certificates stored on persistent storage. ### Source excerpt This guide is for installing traefik 2 on k3s.If you're not using rancher, that's fine, just skip to Reconfiguring k3s Note: There is an updated tutorial on installing traefik + cert-manager on Kubernetes here. However, if you want to store your certificates on disk, this tutorial here is perfectly fine. It assumes you have followed: Fully Automated K3S etcd High Availability Install ... ## How to Secure a Self-Hosted Rancher UI with Traefik, Let's Encrypt, and OAuth Providers DevFeed: [How to Secure a Self-Hosted Rancher UI with Traefik, Let's Encrypt, and OAuth Providers]() Original publisher: [Read original article]() Author: Techno Tim Published: 2020-09-05T14:00:00Z Content type: tutorial Language: en Sources: [Techno Tim]() Topics: [rancher](), [traefik](), [Tutorial](), [Homelab](), [SSL](), [OAuth](), [Authentication]() Tags: [authentication](), [guide](), [homelab](), [kubernetes](), [oauth](), [rancher](), [ssl](), [traefik](), [tutorial]() ### AI overview This step-by-step tutorial explains how to self-host a Rancher UI in a homelab, place it behind Traefik, obtain SSL certificates with Let's Encrypt, make the UI publicly available, and configure third-party OAuth providers for additional authentication features. ### Source excerpt Do you want to self host your Rancher UI securely in your homelab? Have you thought about putting your Rancher UI behind Traefik and your reverse proxy to get free SSL certificates using Let's Encrypt? Do you want to make your Rancher UI available publicly and secure it using 3rd party OAuth providers like Google, GitHub, Keycloak, Okta, Shibboleth, and more? Well this is the guide for you.In... ## Self-Hosting Your Homelab Services with SSL -- Let's Encrypt, MetalLB, Traefik, Rancher, Kubernetes DevFeed: [Self-Hosting Your Homelab Services with SSL -- Let's Encrypt, MetalLB, Traefik, Rancher, Kubernetes]() Original publisher: [Read original article]() Author: Techno Tim Published: 2020-08-15T14:00:00Z Content type: tutorial Language: en Sources: [Techno Tim]() Topics: [Homelab](), [Self-hosted](), [Tutorial](), [Kubernetes](), [rancher](), [traefik](), [SSL]() Tags: [certificates](), [homelab](), [ingress](), [kubernetes](), [proxy](), [rancher](), [self-hosting](), [ssl](), [traefik](), [tutorial](), [video](), [vpn]() ### AI overview A step-by-step video tutorial for securing self-hosted homelab services with SSL certificates. It covers Rancher, Kubernetes, Kubernetes Ingress, MetalLB, Traefik, Let's Encrypt, and DNS, including a staging-to-production certificate configuration change. ### Source excerpt Are you self-hosting lots of services at home in your homelab? Have you been port forwarding or using VPN to access your self-hosted services wishing you had certificates so that you can access them securely over SSL? Well after this video, you can! In this step by step tutorial we'll walk through setting up Rancher and Kubernetes with a reverse proxy, Kubernetes Ingress, MetalLB, Traefik, L... ## GKE using Traefik as the ingress controller DevFeed: [GKE using Traefik as the ingress controller]() Original publisher: [Read original article]() Author: Carlos Alexandro Becker Published: 2020-02-02T00:00:00Z Content type: tutorial Language: en Sources: [Carlos Becker]() Topics: [Gke](), [traefik](), [Kubernetes](), [Cloudflare]() Tags: [cloudflare](), [gke](), [ingress](), [kubernetes](), [load-balancer](), [traefik]() ### AI overview The article explains how using Traefik as the ingress controller in a GKE Kubernetes cluster caused intermittent Cloudflare HTTP 520 errors. A load balancer sent traffic to preemptible nodes that did not run Traefik; if a node was preempted during a slow request, the request ended prematurely. The proposed fix is to configure load-balancer health checks so only nodes running Traefik receive traffic. ### Source excerpt I recently fell into a trap using Traefik as the ingress controller in one cluster. I decided to write about it with hopes it maybe help someone else.