# traefik Traefik is an open-source reverse proxy and ingress controller for dynamically routing and load-balancing services and APIs. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Running a Self-Hosted Tailscale Control Server Behind a Reverse Proxy DevFeed: [Running a Self-Hosted Tailscale Control Server Behind a Reverse Proxy]() Original publisher: [Read original article]() Author: Philipp Lehmann (philipp.lehmann@gruppe.ai) Published: 2026-09-15T07:00:00Z Content type: tutorial Language: en Sources: [Philipp Lehmann]() Topics: [tailscale](), [proxy](), [traefik](), [TLS (Transport Layer Security)](), [TLS handshake](), [Self-hosted](), [Homelab]() Tags: [dns](), [docker](), [h2](), [homelab](), [networking](), [proxy](), [reverse-proxy](), [security](), [self-hosted](), [tailscale](), [tls](), [tls-handshake](), [traefik]() ### AI overview This tutorial explains how to run a self-hosted Tailscale control server, Headscale, behind Traefik. It finds that the reverse proxy must use TLS with HTTP/1.1 only because Tailscale's noise handshake expects a full-duplex byte stream and can fail when ALPN negotiates HTTP/2. ### Source excerpt Headscale behind Traefik: tls.options=no-h2@file with alpnProtocols http/1.1, because the Tailscale noise handshake breaks when ALPN negotiates h2. ## Traefik: proxy inverso para contenedores DevFeed: [Traefik: proxy inverso para contenedores]() Original publisher: [Read original article]() Author: Antonio Pérez Published: 2026-08-03T00:00:00Z Content type: tutorial Language: es Sources: [tengoping.com]() Topics: [traefik](), [Docker](), [proxy](), [let's encrypt](), [Docker Compose](), [TLS (Transport Layer Security)]() Tags: [docker](), [docker-compose](), [let-s-encrypt](), [proxy](), [tls](), [traefik]() ### AI overview This tutorial explains how Traefik acts as a reverse proxy for Docker containers. It covers automatic container discovery through Docker labels, routing with entryPoints, routers, and services, and automatic HTTPS certificates through Let's Encrypt. It also compares Traefik with manually configured Nginx and mentions Caddy as an alternative. ### Source excerpt Traefik detecta tus contenedores Docker automáticamente y les da HTTPS con Let's Encrypt vía labels, sin tocar un fichero de configuración. ## Single-Node Kubernetes GitOps on a Budget DevFeed: [Single-Node Kubernetes GitOps on a Budget]() Original publisher: [Read original article]() Published: 2026-03-04T00:00:00Z Content type: tutorial Language: en Sources: [Gaurav Sarma's Blog]() Topics: [GitOps](), [k3s](), [argocd](), [Kubernetes](), [Deployment](), [Self-hosted](), [Firewall](), [TLS (Transport Layer Security)](), [traefik](), [Ubuntu](), [GitHub](), [Digital Ocean]() Tags: [argocd](), [deployment](), [digitalocean](), [firewall](), [github](), [gitops](), [k3s](), [kubernetes](), [lets](), [linux](), [macos](), [self-hosted]() ### AI overview This tutorial describes a budget-conscious, single-node Kubernetes platform built with k3s and GitOps. It covers bootstrapping an Ubuntu VM, syncing applications with ArgoCD, and adding TLS and firewall controls. The supplied text is truncated before the full implementation is presented. ### Source excerpt . [Single-Node Kubernetes GitOps on a Budget](single-node-k3s-gitops-on-a-budget-cover... ## Running Docker and Home Assistant on TrueNAS with Compose, macvlan, and Traefik DevFeed: [Running Docker and Home Assistant on TrueNAS with Compose, macvlan, and Traefik]() Original publisher: [Read original article]() Author: Techno Tim Published: 2025-07-14T13:00:00Z Content type: tutorial Language: en Sources: [Techno Tim]() Topics: [Docker](), [truenas](), [Docker Compose](), [YAML](), [Home Assistant](), [traefik](), [Self-hosted](), [Networks]() Tags: [compose](), [containers](), [docker](), [home-assistant](), [homelab](), [how-to](), [networks](), [self-hosted](), [self-hosting](), [traefik](), [truenas](), [yaml]() ### AI overview A tutorial for running Docker applications on TrueNAS using YAML and Docker Compose. It covers creating datasets, optionally managing services through Code Server, and configuring Home Assistant with macvlan networking and Traefik for device discovery and reverse-proxy access. ### Source excerpt Learn how to run Docker apps on TrueNAS like a pro -- with full control, clean YAML, and no extra dashboards. Have questions or a different setup that works for you? Leave a comment, I'd love to hear how others are running Docker on TrueNAS. 📺 Watch Video Starting with TrueNAS 25.10, you will need to add a services key to your custom yaml for new stacks and when updating your existing s... ## How to Self-Host Your Own Private AI Stack DevFeed: [How to Self-Host Your Own Private AI Stack]() Original publisher: [Read original article]() Author: Techno Tim Published: 2024-07-08T13:00:00Z Content type: tutorial Language: en Sources: [Techno Tim]() Topics: [Artificial Intelligence](), [Self-hosted](), [Local AI](), [Docker Compose](), [Ollama](), [traefik](), [Ubuntu]() Tags: [ai](), [docker](), [homelab](), [how-to](), [ollama](), [self-hosted](), [self-hosted-ai](), [traefik](), [ubuntu]() ### AI overview A tutorial for running a local, private, self-hosted AI stack. It covers hardware considerations, Ubuntu Server 24.04 LTS, NVIDIA drivers, Docker Compose services, Traefik reverse-proxy access, internal DNS, and optional basic authentication for Ollama. ### Source excerpt In this tutorial we'll walk through my local, private, self-hosted AI stack so that you can run it too. 📺 Watch Video Disclosures Nothing in this video was sponsored Info If you're looking for the overview of this stack, you can out the video here Self-Hosted AI That's Actually Useful Hardware Machine Used for AI: Building My ULTIMATE, All-inOne, HomeLab Server GPUs Here are ... ## Traefik 3 Wildcard Certificates with Docker, Let's Encrypt, and Cloudflare DevFeed: [Traefik 3 Wildcard Certificates with Docker, Let's Encrypt, and Cloudflare]() Original publisher: [Read original article]() Author: Techno Tim Published: 2024-04-30T13:00:00Z Content type: tutorial Language: en Sources: [Techno Tim]() Topics: [traefik](), [Docker](), [Tutorial](), [Cloudflare](), [Docker Compose](), [Homelab](), [Self-hosted](), [Pi-hole]() Tags: [certificates](), [cloudflare](), [compose](), [dns](), [docker](), [homelab](), [how-to](), [self-hosted](), [traefik](), [tutorial]() ### AI overview A tutorial showing how to configure Traefik 3 in Docker to obtain Let's Encrypt wildcard certificates using Cloudflare DNS, then use local DNS to route internal self-hosted services through those certificates. ### Source excerpt In today's Traefik tutorial we'll get FREE Wildcard certificates to use in our HomeLab and with all of our internal self-hosted services. We're going to set up Traefik 3 in Docker and get Let's Encrypt certificates using Cloudflare as our DNS Provider (we'll cover how to set up others too). Then we'll configure local DNS using PiHole (or any other local DNS) to route to our services that are ... ## Wildcard Certificates with Traefik + cert-manager + Let's Encrypt in Kubernetes Tutorial DevFeed: [Wildcard Certificates with Traefik + cert-manager + Let's Encrypt in Kubernetes Tutorial]() Original publisher: [Read original article]() Author: Techno Tim Published: 2022-08-06T14:00:00Z Content type: tutorial Language: en Sources: [Techno Tim]() Topics: [Kubernetes](), [traefik](), [Tutorial](), [TLS (Transport Layer Security)](), [Cloudflare](), [Cloud]() Tags: [cloudflare](), [helm](), [ingress](), [kubernetes](), [load-balancer](), [tls](), [traefik](), [tutorial]() ### AI overview A step-by-step tutorial for configuring Traefik as a Kubernetes Ingress Controller, installing cert-manager, and using Cloudflare DNS challenges with Let's Encrypt to automatically provision TLS and wildcard certificates. ### Source excerpt Traefik, cert-manager, Cloudflare, and Let's Encrypt are a winning combination when it comes to securing your services with certificates in Kubernetes.Today, we'll install and configure Traefik, the cloud native proxy and load balancer, as our Kubernetes Ingress Controller.We'll then install and configure cert-manager to manage certificates for our cluster.We'll set up Let's Encrypt as our Clu... ## Open Source & Collaborative Security with CrowdSec and Traefik - CrowdSec & Traefik Tutorial DevFeed: [Open Source & Collaborative Security with CrowdSec and Traefik - CrowdSec & Traefik Tutorial]() Original publisher: [Read original article]() Author: Techno Tim Published: 2022-02-12T13:00:00Z Content type: tutorial Language: en Sources: [Techno Tim]() Topics: [traefik](), [Security](), [Self-hosted](), [Homelab]() Tags: [api](), [community](), [free](), [homelab](), [open-source](), [proxy](), [security](), [traefik](), [tutorial]() ### AI overview A tutorial explains how to use CrowdSec with the Traefik reverse proxy to detect and block threats, share threat signals, and manage bans through a self-hosted setup. It also considers CrowdSec as a possible alternative to fail2ban. ### Source excerpt CrowdSec is a free, open-source and collaborative IPS. Analyze behaviors, respond to attacks & share signals across the community.With CrowdSec, you can set up your own intrusion detection system that parses logs, detects and blocks threats, and shares bad actors with the larger CrowdSec community.It works great with a reverse proxy like traefik to help keep hackers at bay.Could this be a v... ## 2 Factor Auth and Single Sign on with Authelia DevFeed: [2 Factor Auth and Single Sign on with Authelia]() Original publisher: [Read original article]() Author: Techno Tim Published: 2021-06-05T14:00:00Z Content type: tutorial Language: en Sources: [Techno Tim]() Topics: [traefik](), [Open Source](), [Portainer](), [configuration](), [nginx]() Tags: [auth](), [configuration](), [open-source](), [portainer](), [proxy](), [traefik]() ### AI overview A tutorial on configuring Authelia with Portainer and Traefik to add single sign-on, two-factor authentication, and brute-force protection to reverse-proxy endpoints. ### Source excerpt Authelia is an open source Single Sign On and 2FA companion for reverse proxies.It helps you secure your endpoints with single factor and 2 factor auth.It works with Nginx, Traefik, and HA proxy.Today, we'll configure Authelia with Portainer and Traefik and have 2 Factor up and running with brute force protection! 📺 Watch Video Traefik Authelia will work with other reverse proxies but I us... ## Configure Traefik and Portainer with Let's Encrypt wildcard SSL certificates DevFeed: [Configure Traefik and Portainer with Let's Encrypt wildcard SSL certificates]() Original publisher: [Read original article]() Author: Techno Tim Published: 2021-04-24T14:00:00Z Content type: tutorial Language: en Sources: [Techno Tim]() Topics: [traefik](), [Portainer](), [SSL](), [hosting]() Tags: [certificates](), [guide](), [hosting](), [how-to](), [portainer](), [proxy](), [ssl](), [traefik]() ### AI overview A tutorial on configuring Traefik and Portainer as a reverse proxy to obtain wildcard certificates from Let's Encrypt and use SSL for internal and external services. ### Source excerpt Today, we're going to use SSL for everything.No more self-sign certs.No more http.No more hosting things on odd ports.We're going all in with SSL for our internal services and our external services too.We going to set up a reverse proxy using Traefik, Portainer, and use that to get wildcard certificates from Let's Encrypt. Join me and let's secure all the things. 📺 Watch Video Looking fo... ## Configuring Traefik 2 Ingress for Kubernetes DevFeed: [Configuring Traefik 2 Ingress for Kubernetes]() Original publisher: [Read original article]() Author: Techno Tim Published: 2021-04-08T14:00:00Z Content type: tutorial Language: en Sources: [Techno Tim]() Topics: [traefik](), [Kubernetes](), [k3s](), [rancher](), [Cloudflare]() Tags: [certificates](), [cloudflare](), [helm](), [high-availability](), [homelab](), [ingress](), [k3s](), [kubernetes](), [rancher](), [self-hosting](), [ssl](), [traefik](), [tutorial]() ### AI overview A tutorial for configuring Traefik 2 as the ingress controller on a highly available k3s Kubernetes cluster, including Rancher compatibility, external load balancing, and wildcard certificates stored on persistent storage. ### Source excerpt This guide is for installing traefik 2 on k3s.If you're not using rancher, that's fine, just skip to Reconfiguring k3s Note: There is an updated tutorial on installing traefik + cert-manager on Kubernetes here. However, if you want to store your certificates on disk, this tutorial here is perfectly fine. It assumes you have followed: Fully Automated K3S etcd High Availability Install ... ## How to Secure a Self-Hosted Rancher UI with Traefik, Let's Encrypt, and OAuth Providers DevFeed: [How to Secure a Self-Hosted Rancher UI with Traefik, Let's Encrypt, and OAuth Providers]() Original publisher: [Read original article]() Author: Techno Tim Published: 2020-09-05T14:00:00Z Content type: tutorial Language: en Sources: [Techno Tim]() Topics: [rancher](), [traefik](), [Tutorial](), [Homelab](), [SSL](), [OAuth](), [Authentication]() Tags: [authentication](), [guide](), [homelab](), [kubernetes](), [oauth](), [rancher](), [ssl](), [traefik](), [tutorial]() ### AI overview This step-by-step tutorial explains how to self-host a Rancher UI in a homelab, place it behind Traefik, obtain SSL certificates with Let's Encrypt, make the UI publicly available, and configure third-party OAuth providers for additional authentication features. ### Source excerpt Do you want to self host your Rancher UI securely in your homelab? Have you thought about putting your Rancher UI behind Traefik and your reverse proxy to get free SSL certificates using Let's Encrypt? Do you want to make your Rancher UI available publicly and secure it using 3rd party OAuth providers like Google, GitHub, Keycloak, Okta, Shibboleth, and more? Well this is the guide for you.In... ## Self-Hosting Your Homelab Services with SSL -- Let's Encrypt, MetalLB, Traefik, Rancher, Kubernetes DevFeed: [Self-Hosting Your Homelab Services with SSL -- Let's Encrypt, MetalLB, Traefik, Rancher, Kubernetes]() Original publisher: [Read original article]() Author: Techno Tim Published: 2020-08-15T14:00:00Z Content type: tutorial Language: en Sources: [Techno Tim]() Topics: [Homelab](), [Self-hosted](), [Tutorial](), [Kubernetes](), [rancher](), [traefik](), [SSL]() Tags: [certificates](), [homelab](), [ingress](), [kubernetes](), [proxy](), [rancher](), [self-hosting](), [ssl](), [traefik](), [tutorial](), [video](), [vpn]() ### AI overview A step-by-step video tutorial for securing self-hosted homelab services with SSL certificates. It covers Rancher, Kubernetes, Kubernetes Ingress, MetalLB, Traefik, Let's Encrypt, and DNS, including a staging-to-production certificate configuration change. ### Source excerpt Are you self-hosting lots of services at home in your homelab? Have you been port forwarding or using VPN to access your self-hosted services wishing you had certificates so that you can access them securely over SSL? Well after this video, you can! In this step by step tutorial we'll walk through setting up Rancher and Kubernetes with a reverse proxy, Kubernetes Ingress, MetalLB, Traefik, L... ## GKE using Traefik as the ingress controller DevFeed: [GKE using Traefik as the ingress controller]() Original publisher: [Read original article]() Author: Carlos Alexandro Becker Published: 2020-02-02T00:00:00Z Content type: tutorial Language: en Sources: [Carlos Becker]() Topics: [Gke](), [traefik](), [Kubernetes](), [Cloudflare]() Tags: [cloudflare](), [gke](), [ingress](), [kubernetes](), [load-balancer](), [traefik]() ### AI overview The article explains how using Traefik as the ingress controller in a GKE Kubernetes cluster caused intermittent Cloudflare HTTP 520 errors. A load balancer sent traffic to preemptible nodes that did not run Traefik; if a node was preempted during a slow request, the request ended prematurely. The proposed fix is to configure load-balancer health checks so only nodes running Traefik receive traffic. ### Source excerpt I recently fell into a trap using Traefik as the ingress controller in one cluster. I decided to write about it with hopes it maybe help someone else.