"
Current Setup, without Traefik plug
My current setup is pretty standard. I have 80 and 443 forwarded to an internal host. On that host I run traefik and some docker containers.
But I'd like to a second internal host, also running some services. And I'd like to do this without running either on non-standard ports.
Desired setup, with os-traefik-maxit
I've installed traefik from mimugmail's repo. I was planning something like this:
I wonder if anyone has set up something similar. I'm running into some roadblocks right out of the gate and I wonder if anyone has solved them or has suggests.
1. Traefik entry points look like
I guess one solution might be that I could have traefik listen on non-standard ports like 127.0.0.1:8443 and then use a port forwarding rule in the OPNSense firewall config.
2. One reason I like Traefik is because of how easy it is to manage TLS certificates. I use DNS challenge with Digital Ocean, but that requires an environment variable
My current setup is pretty standard. I have 80 and 443 forwarded to an internal host. On that host I run traefik and some docker containers.
- 80 -> internalhost1:80
- 443 -> internalhost1:443
But I'd like to a second internal host, also running some services. And I'd like to do this without running either on non-standard ports.
Desired setup, with os-traefik-maxit
I've installed traefik from mimugmail's repo. I was planning something like this:
- http://(.*) -> https://(.*)
- https://newservice.example.com -> https://internalhost2/
- https://oldservice1.example.com -> https://internalhost1/
- https://oldservice2.example.com -> https://internalhost1/
- https://oldservice3.example.com -> https://internalhost1/
I wonder if anyone has set up something similar. I'm running into some roadblocks right out of the gate and I wonder if anyone has solved them or has suggests.
1. Traefik entry points look like
Code Select
address = ":443", but that will conflict with the local opnsense webui. IS there some way to dynamically use the WAN ip address as the bind address in a configuration file like this? I don't think traefik allows selecting a bind adapter. I won't need traefik on OPNSense listening on any local IPs.I guess one solution might be that I could have traefik listen on non-standard ports like 127.0.0.1:8443 and then use a port forwarding rule in the OPNSense firewall config.
2. One reason I like Traefik is because of how easy it is to manage TLS certificates. I use DNS challenge with Digital Ocean, but that requires an environment variable
Code Select
DO_AUTH_TOKEN is set. I don't think traefik lets me put this in the traefik.toml file. Is there a way to set environment global variables on OPNsense so that a service like traefik will inherit that in its launch shell?
