nas-compose/reverse-proxy

Reverse-Proxy

Creates a reverse proxy to expose other services running in the NAS

Traefik

traefik is a reverse proxy for docker services.

🌐 Ports

• 80 TCP: HTTP access. Should always redirect to HTTPs
• 443 TCP: HTTPs access

📂 Volumes

• traefik_dynamic_config: Folder containing the dynamic configuration for File provider. See traefik documentation.

📝 Configs

• traefik.yml: Static configuration file
• dynamic/authelia.yml: HTTP ForwardAuth middlewares to authenticate via the authentication service (Authelia)
• dynamic/hsts.yml: Set of HTTP headers to enable HSTS
• dynamic/htransformation.yml: HTTP header conversion via htransformation to enable authentication on some services
• dynamic/portainer.yml: Route exposing Portainer
• dynamic/synology.yml: Route exposing the Synology DSM interface of the host
• dynamic/tls.yml: TLS configuration of the instance
• dynamic/traefik.yml: Route exposing the Traefik API/Dashboard
• dynamic/qbittorrent-api.yml: Special case exposing the API of qBittorrent with BasicAuth managed by the Authentication service

🔒 Secrets

• traefik_tls_cert: Self-signed certificate for Traefik. Particularly useful in development to avoid generating new certificates on each restart.
• traefik_tls_key: Self-signed private key for Traefik. Used with traefik_tls_cert.

📒 Documentation

• Traefik official documentation