Files
nas-compose/reverse-proxy/README.md
2023-11-20 09:17:35 +11:00

1.8 KiB

Reverse-Proxy

Creates a reverse proxy to expose other services running in the NAS

Traefik

traefik is a reverse proxy for docker services.

🌐 Ports

  • 80 TCP: HTTP access. Should always redirect to HTTPs
  • 443 TCP: HTTPs access

📂 Volumes

  • traefik_dynamic_config: Folder containing the dynamic configuration for File provider. See traefik documentation.

📝 Configs

  • traefik.yml: Static configuration file
  • dynamic/authelia.yml: HTTP ForwardAuth middlewares to authenticate via the authentication service (Authelia)
  • dynamic/hsts.yml: Set of HTTP headers to enable HSTS
  • dynamic/htransformation.yml: HTTP header conversion via htransformation to enable authentication on some services
  • dynamic/portainer.yml: Route exposing Portainer
  • dynamic/synology.yml: Route exposing the Synology DSM interface of the host
  • dynamic/tls.yml: TLS configuration of the instance
  • dynamic/traefik.yml: Route exposing the Traefik API/Dashboard
  • dynamic/qbittorrent-api.yml: Special case exposing the API of qBittorrent with BasicAuth managed by the Authentication service

🔒 Secrets

  • traefik_tls_cert: Self-signed certificate for Traefik. Particularly useful in development to avoid generating new certificates on each restart.
  • traefik_tls_key: Self-signed private key for Traefik. Used with traefik_tls_cert.

📒 Documentation