Traefik – Using Traefik as Reverse Proxy with Certbot/Lego

certbotlets-encryptnginxreverse-proxytraefik

When setting up a server I use a reverse proxy and acme tool for dns01 support (I use either nginx + certbot or nginx + lego). I want to start using traefik instead.

I don't understand how traefik interacts with certbot (or lego, etc.), and I can't find relevant examples. I found many examples for getting certs using traefik itself.

Is certbot/lego not needed at all in a traefik setup? Can it do everything certbot can do?

Best Answer

Looks like traefik uses lego internally - so it can do whatever lego can do (I assume).

Therefore as far as I can tell, certbot/lego/etc. is not needed anymore.

Related Solutions

NGINX Reverse Proxy – URL Rewrite

Any redirect to localhost doesn't make sense from a remote system (e.g. client's Web browser). So the rewrite flags permanent (301) or redirect (302) are not usable in your case.

Please try following setup using a transparent rewrite rule:

location  /foo {
  rewrite /foo/(.*) /$1  break;
  proxy_pass         http://localhost:3200;
  proxy_redirect     off;
  proxy_set_header   Host $host;
}

Use curl -i to test your rewrites. A very subtle change to the rule can cause nginx to perform a redirect.

nginx Reverse Proxy – Solving Mixed Content Issues (HTTP, HTTPS)

You have to go through the sites' code, and replace all occurences of http://domain.com/resource with either /resource or //domain.com/resource.

This ensures that all the dependent web page resources are loaded with the same protocol as the website itself is loaded.

Best Answer

Related Solutions

NGINX Reverse Proxy – URL Rewrite

nginx Reverse Proxy – Solving Mixed Content Issues (HTTP, HTTPS)

Related Topic