traefik-reverse-proxy

Local

Generate SSL cert

1. Install minica
   1. brew install minica
2. cd certs
3. minica --domains '*.lvh.me'
4. sudo security add-trusted-cert -d -r trustAsRoot -p ssl -k /Library/Keychains/System.keychain _.lvh.me/cert.pem

You can run steps 3. & 4. for as many other domains as you need for any other services.

Production

Basic Auth

We will do basic auth using userFile in Traefik.

Generate .htpasswd file.

sudo apt install apache2-utils # Linux
htpasswd -cb .htpasswd admin <your-password>

Change domain name for the Traefik Dashboard

In docker-compose.production.yaml file.

traefik.http.routers.rev-proxy.rule=Host(`proxy.example.com`)

Change email for Let's Encrypt SSL renewal.

In docker-compose.production.yaml file.

TRAEFIK_CERTIFICATESRESOLVERS_LETSENCRYPTRESOLVER_ACME_EMAIL=john.doe@example.com

GoDaddy API Secrets

Generate new api key and secret for GoDaddy API from - https://developer.godaddy.com/keys

and save them in below files.

• ./secrets/godaddy_api_key
• ./secrets/godaddy_api_secret