# Traefik

**URL:** https://community.traefik.io/c/traefik/5.md

[Latest](https://community.traefik.io/latest.md) · [Categories](https://community.traefik.io/categories.md) · [Tags](https://community.traefik.io/tags.md)

---

## [About the Traefik category](https://community.traefik.io/t/about-the-traefik-category/19)

<div class="topic-metadata">

**Author:** [@dduportal](https://community.traefik.io/u/dduportal)\
**Replies:** 0

</div>

Ask questions, get support, and learn more about anything Traefik related.

---

## [Traefik Container persistent storage using QNAP](https://community.traefik.io/t/traefik-container-persistent-storage-using-qnap/29710)

<div class="topic-metadata">

**Author:** [@TheTinkerer](https://community.traefik.io/u/TheTinkerer)\
**Replies:** 3\
**Last updated:** [March 1, 2026, 1:17pm UTC](https://community.traefik.io/t/traefik-container-persistent-storage-using-qnap/29710 "2026-03-01T13:17:35Z")

</div>

I am trying to setup Traefik on my QNAP using Container Station but can anyone tell me what the names of the directories are for setting up of persistent storage? NOTE The paths I show in the screenshot are for demonstra…

---

## [SHA hash changed for Traefik image v3.7.13 in Docker Hub ?](https://community.traefik.io/t/sha-hash-changed-for-traefik-image-v3-7-13-in-docker-hub/30253)

<div class="topic-metadata">

**Author:** [@mig5](https://community.traefik.io/u/mig5)\
**Replies:** 1\
**Last updated:** [September 25, 2026, 7:47am UTC](https://community.traefik.io/t/sha-hash-changed-for-traefik-image-v3-7-13-in-docker-hub/30253 "2026-09-25T07:47:04Z")

</div>

Hi there! I noticed that the manifest SHA hash has changed in Docker hub for Traefik v3.7.13. It went from: docker.io/library/traefik:v3.7.13@sha256:96780238b1bbda5a9bb997f4307ce69e798ad1cf6eb7f2dcc0a440823467d199 to…

---

## [Kubernetes questions about gateway API and the dashboard](https://community.traefik.io/t/kubernetes-questions-about-gateway-api-and-the-dashboard/29675)

<div class="topic-metadata">

**Author:** [@segev-swimm](https://community.traefik.io/u/segev-swimm)\
**Replies:** 0\
**Last updated:** [February 15, 2026, 11:19pm UTC](https://community.traefik.io/t/kubernetes-questions-about-gateway-api-and-the-dashboard/29675 "2026-02-15T23:19:05Z")

</div>

I have a few questions about Traefik on Kubernetes: Can I expose the dashboard only via kubectl port-forward or some other tunneled method so it is not accessible to the wide internet? The example in the docs uses basi…

---

## [TLS certificates shared by all routes?](https://community.traefik.io/t/tls-certificates-shared-by-all-routes/30115)

<div class="topic-metadata">

**Author:** [@razr](https://community.traefik.io/u/razr)\
**Replies:** 1\
**Last updated:** [August 14, 2026, 11:28am UTC](https://community.traefik.io/t/tls-certificates-shared-by-all-routes/30115 "2026-08-14T11:28:57Z")

</div>

I noticed something when I tested copying an Ingress resource: When I have two ingress resources with the same hosts, but only one references a TLS secret, both routers in Traefik have TLS. I noticed this when I copied …

---

## [Traefik SSL issue ](https://community.traefik.io/t/traefik-ssl-issue/29548)

<div class="topic-metadata">

**Author:** [@rohit-bayer-ind](https://community.traefik.io/u/rohit-bayer-ind)\
**Replies:** 2\
**Last updated:** [January 7, 2026, 10:57am UTC](https://community.traefik.io/t/traefik-ssl-issue/29548 "2026-01-07T10:57:52Z")

</div>

Hi Community Members , we have traeefik with version 3.6.4 running as a docker container inside aws ecs service it has an efs mounted volume file system redis as a dynamic configuration provider static configuration …

---

## [How to handle router tls. ](https://community.traefik.io/t/how-to-handle-router-tls/29779)

<div class="topic-metadata">

**Author:** [@13archit](https://community.traefik.io/u/13archit)\
**Replies:** 1\
**Last updated:** [April 3, 2026, 1:20am UTC](https://community.traefik.io/t/how-to-handle-router-tls/29779 "2026-04-03T01:20:51Z")

</div>

Recently I deployed traefik helm chart, and in websecure I set tls false, and my application was giving 404, but adding these 2 annotation solved this issue. traefik.ingress.kubernetes.io/router.entrypoints:\`\` websecure …

---

## [Recording available 🎉 Online Meetup: What's New in Traefik Proxy 2.5](https://community.traefik.io/t/recording-available-online-meetup-whats-new-in-traefik-proxy-2-5/11638)

<div class="topic-metadata">

**Author:** [@patricia\_dugan](https://community.traefik.io/u/patricia_dugan)\
**Replies:** 0\
**Last updated:** [September 1, 2021, 11:17pm UTC](https://community.traefik.io/t/recording-available-online-meetup-whats-new-in-traefik-proxy-2-5/11638 "2021-09-01T23:17:33Z")

</div>

Hi everyone! :grinning: Manuel and Douglas from the Traefik Labs team presented a meetup about 2.5 today. Here's the recording if you'd like to check it out: https://traefik.io/resources/traefik-2-5-kubernetes-meetup/

---

## [No api-resources such as ingressroutes or middlewares are created when I use migrate/nginx-to-traefik](https://community.traefik.io/t/no-api-resources-such-as-ingressroutes-or-middlewares-are-created-when-i-use-migrate-nginx-to-traefik/29589)

<div class="topic-metadata">

**Author:** [@vfiset](https://community.traefik.io/u/vfiset)\
**Replies:** 4\
**Last updated:** [January 28, 2026, 12:03pm UTC](https://community.traefik.io/t/no-api-resources-such-as-ingressroutes-or-middlewares-are-created-when-i-use-migrate-nginx-to-traefik/29589 "2026-01-28T12:03:16Z")

</div>

Hi, when I follow the migration doc to migrate from nginx ingress controller to traefik using helm, I get a functionnal setup and everything is displayed correctly in the traefik dashboard but I see no k8s objects create…

---

## [Traefik dynamic configuration with Coolify returning 403 for websockets](https://community.traefik.io/t/traefik-dynamic-configuration-with-coolify-returning-403-for-websockets/29727)

<div class="topic-metadata">

**Author:** [@akex06](https://community.traefik.io/u/akex06)\
**Replies:** 1\
**Last updated:** [March 6, 2026, 1:38pm UTC](https://community.traefik.io/t/traefik-dynamic-configuration-with-coolify-returning-403-for-websockets/29727 "2026-03-06T13:38:34Z")

</div>

HTTP works fine http: routers: octopi: rule: Host(\`xxx\`) service: octopi entryPoints: - https tls: certResolver: letsencrypt services: octopi: loadBalancer: …

---

## [Error validating contact(s) :: unable to parse email address](https://community.traefik.io/t/error-validating-contact-s-unable-to-parse-email-address/30280)

<div class="topic-metadata">

**Author:** [@dotarjun](https://community.traefik.io/u/dotarjun)\
**Replies:** 1\
**Last updated:** [October 19, 2026, 5:48am UTC](https://community.traefik.io/t/error-validating-contact-s-unable-to-parse-email-address/30280 "2026-10-19T05:48:52Z")

</div>

So I am setting up traefik for my home lab and I am getting this error ❯ sudo docker compose down && sudo docker compose up -d && sudo docker compose logs -f | grep "ERR" \[+\] down 2/2 ✔ Container traefik Removed …

---

## [Please help me get lets encrypt working](https://community.traefik.io/t/please-help-me-get-lets-encrypt-working/29485)

<div class="topic-metadata">

**Author:** [@kj7pku](https://community.traefik.io/u/kj7pku)\
**Replies:** 1\
**Last updated:** [December 20, 2025, 8:55am UTC](https://community.traefik.io/t/please-help-me-get-lets-encrypt-working/29485 "2025-12-20T08:55:13Z")

</div>

I’ve verified that the .well known link is accessible. here is my redacted config. I see the request in logs 2025-12-19T02:58:47Z INF Testing certificate renew... acmeCA=https://acme-v02.api.letsencrypt.org/directory pr…

---

## [Certificat expired](https://community.traefik.io/t/certificat-expired/17686)

<div class="topic-metadata">

**Author:** [@kardagan](https://community.traefik.io/u/kardagan)\
**Replies:** 1\
**Last updated:** [February 23, 2023, 1:45pm UTC](https://community.traefik.io/t/certificat-expired/17686 "2023-02-23T13:45:31Z")

</div>

hello, https://traefik.me/ the certificat are expired.

---

## [Security Notification (Threat: Low) - X-Forwarded-Prefix Header Validation](https://community.traefik.io/t/security-notification-threat-low-x-forwarded-prefix-header-validation/7146)

<div class="topic-metadata">

**Author:** [@notsureifkevin](https://community.traefik.io/u/notsureifkevin)\
**Replies:** 0\
**Last updated:** [July 30, 2020, 2:14pm UTC](https://community.traefik.io/t/security-notification-threat-low-x-forwarded-prefix-header-validation/7146 "2020-07-30T14:14:11Z")

</div>

The GitHub Security Lab Team notified Containous on behalf of the GitHub Application Security Team (GHAS) about a potential open redirect vulnerability in the Traefik Dashboard API. The potential for exploitation is low…

---

## [Add multiple adresses for an endpoint?](https://community.traefik.io/t/add-multiple-adresses-for-an-endpoint/29610)

<div class="topic-metadata">

**Author:** [@TornaxO7](https://community.traefik.io/u/TornaxO7)\
**Replies:** 2\
**Last updated:** [January 29, 2026, 9:53pm UTC](https://community.traefik.io/t/add-multiple-adresses-for-an-endpoint/29610 "2026-01-29T21:53:37Z")

</div>

Context I’d like to create two endpoints: Endpoint A: For the public internet which should manage its public ip4 and ip6 address Endpoint B: For my VPN which should manage its private VPN address. This is my current c…

---

## [Potential race condition when migrating ingress-nginx to traefik](https://community.traefik.io/t/potential-race-condition-when-migrating-ingress-nginx-to-traefik/29704)

<div class="topic-metadata">

**Author:** [@megabreit](https://community.traefik.io/u/megabreit)\
**Replies:** 1\
**Last updated:** [May 19, 2026, 9:38am UTC](https://community.traefik.io/t/potential-race-condition-when-migrating-ingress-nginx-to-traefik/29704 "2026-05-19T09:38:37Z")

</div>

After reading Use ingress-nginx Resources in Traefik | Traefik Labs i tried this method with version 3.6.7 (bundled with RKE2). It is working fine so far if the ingressClassName is set to nginx. Both Ingress controllers …

---

## [Is Slack being retired in favor of Discourse?](https://community.traefik.io/t/is-slack-being-retired-in-favor-of-discourse/471)

<div class="topic-metadata">

**Author:** [@dduportal](https://community.traefik.io/u/dduportal)\
**Replies:** 0\
**Last updated:** [June 25, 2019, 3:36pm UTC](https://community.traefik.io/t/is-slack-being-retired-in-favor-of-discourse/471 "2019-06-25T15:36:27Z")

</div>

Response from our own @emile (thanks!) in Slack: We still don’t know if Slack will be kept or not. It has become terrible to use with time, almost 6k people are here now. Several conversations are usually taking place …

---

## [How can I add a Middleware to a TCP Router created with TLSRoute from Gateway API?](https://community.traefik.io/t/how-can-i-add-a-middleware-to-a-tcp-router-created-with-tlsroute-from-gateway-api/29636)

<div class="topic-metadata">

**Author:** [@hbobenicio](https://community.traefik.io/u/hbobenicio)\
**Replies:** 0\
**Last updated:** [January 31, 2026, 10:47am UTC](https://community.traefik.io/t/how-can-i-add-a-middleware-to-a-tcp-router-created-with-tlsroute-from-gateway-api/29636 "2026-01-31T10:47:36Z")

</div>

I’m using Traefik as a Gateway API Controller. I’m configuring an HTTPRoute and a TLSRoute. With help of this excellent doc (Advanced - Traefik) I managed to add Middlewares to my HTTPRoute using the \`filter\` property …

---

## [Gateway API and HeaderRegexp](https://community.traefik.io/t/gateway-api-and-headerregexp/29801)

<div class="topic-metadata">

**Author:** [@tomflenner](https://community.traefik.io/u/tomflenner)\
**Replies:** 2\
**Last updated:** [April 22, 2026, 8:17am UTC](https://community.traefik.io/t/gateway-api-and-headerregexp/29801 "2026-04-22T08:17:33Z")

</div>

Hey, Following this thread : HeadersRegexp not working in Ingress Wondering if this is valid for Gateway API also ? Thanks in advance.

---

## [Distroless Docker image, not any more?](https://community.traefik.io/t/distroless-docker-image-not-any-more/29598)

<div class="topic-metadata">

**Author:** [@heavenly](https://community.traefik.io/u/heavenly)\
**Replies:** 3\
**Last updated:** [January 20, 2026, 8:43pm UTC](https://community.traefik.io/t/distroless-docker-image-not-any-more/29598 "2026-01-20T20:43:35Z")

</div>

I remember a couple of months ago, the Docker image was distroless, meaning \`FROM scratch\`. More or less just a \`/traefik\` binary and that’s it. I remember even an official blog post bragging about it in the name of safe…

---

## [better graceful restart with Kubernetes](https://community.traefik.io/t/better-graceful-restart-with-kubernetes/29979)

<div class="topic-metadata">

**Author:** [@adk-swisstopo](https://community.traefik.io/u/adk-swisstopo)\
**Replies:** 4\
**Last updated:** [September 15, 2026, 8:09am UTC](https://community.traefik.io/t/better-graceful-restart-with-kubernetes/29979 "2026-09-15T08:09:51Z")

</div>

The current recommendation to gracefully handle Kubernetes-initiated restarts is to add a preSleep hook. This generally works but is subject to race conditions and delays the restart for longer than strictly necessary (s…

---

## [Adding a waf middleware causes 404 on startup](https://community.traefik.io/t/adding-a-waf-middleware-causes-404-on-startup/29806)

<div class="topic-metadata">

**Author:** [@kalsan](https://community.traefik.io/u/kalsan)\
**Replies:** 7\
**Last updated:** [April 10, 2026, 9:22am UTC](https://community.traefik.io/t/adding-a-waf-middleware-causes-404-on-startup/29806 "2026-04-10T09:22:13Z")

</div>

I have two docker compose projects: traefik: contains traefik 3.6.1 (with v2 ruleset), waf (an instance of modsecurity-crs) and dummy (an instance of whoami used by modsecurity). Also contains traefiknet with bridge dr…

---

## [Poll: Help us choose the next Traefik Academy Class!](https://community.traefik.io/t/poll-help-us-choose-the-next-traefik-academy-class/17639)

<div class="topic-metadata">

**Author:** [@Tiffany](https://community.traefik.io/u/Tiffany)\
**Replies:** 0\
**Last updated:** [February 20, 2023, 6:28pm UTC](https://community.traefik.io/t/poll-help-us-choose-the-next-traefik-academy-class/17639 "2023-02-20T18:28:32Z")

</div>

We created the Traefik Academy to help new and advanced users to use Traefik in production contexts. We currently have 4 great classes there want to know what you want us to make next! poll Don’t forget to check out our…

---

## [Route provisioning taking up to 3 minutes](https://community.traefik.io/t/route-provisioning-taking-up-to-3-minutes/29603)

<div class="topic-metadata">

**Author:** [@james.hargreaves](https://community.traefik.io/u/james.hargreaves)\
**Replies:** 0\
**Last updated:** [January 22, 2026, 1:14pm UTC](https://community.traefik.io/t/route-provisioning-taking-up-to-3-minutes/29603 "2026-01-22T13:14:54Z")

</div>

Hello, We are running Traefik in Kubernetes (installed via Helm). When we create an Ingress object in K8S, the event is read almost immediately and the Host is updated on the object. However, the route in Traefik is no…

---

## [Helm chart repo down?](https://community.traefik.io/t/helm-chart-repo-down/30141)

<div class="topic-metadata">

**Author:** [@rensBL](https://community.traefik.io/u/rensBL)\
**Replies:** 3\
**Last updated:** [August 19, 2026, 7:33am UTC](https://community.traefik.io/t/helm-chart-repo-down/30141 "2026-08-19T07:33:16Z")

</div>

Is there a known issue with the Helm chart server? I'm getting the following when trying to browse the repo: Unable to locate chart traefik: looks like "https://helm.traefik.io/traefik" is not a valid chart repository…

---

## [License clarification needed for github.com/go-acme/tencentclouddnspod@v1.0.1208 dependency used in Traefik](https://community.traefik.io/t/license-clarification-needed-for-github-com-go-acme-tencentclouddnspod-v1-0-1208-dependency-used-in-traefik/29621)

<div class="topic-metadata">

**Author:** [@prachi-gaonkar](https://community.traefik.io/u/prachi-gaonkar)\
**Replies:** 3\
**Last updated:** [January 28, 2026, 1:54pm UTC](https://community.traefik.io/t/license-clarification-needed-for-github-com-go-acme-tencentclouddnspod-v1-0-1208-dependency-used-in-traefik/29621 "2026-01-28T13:54:41Z")

</div>

While preparing Traefik container images for publication, we are reviewing third-party dependencies and their licenses for compliance using an SBOM-based scan. During this review, we identified the Go dependency github.…

---

## [How to prevent possible route collisions between groups?](https://community.traefik.io/t/how-to-prevent-possible-route-collisions-between-groups/29630)

<div class="topic-metadata">

**Author:** [@esbio](https://community.traefik.io/u/esbio)\
**Replies:** 2\
**Last updated:** [January 31, 2026, 11:13am UTC](https://community.traefik.io/t/how-to-prevent-possible-route-collisions-between-groups/29630 "2026-01-31T11:13:40Z")

</div>

I am new to traefik and I have the following issue. I would like to have one traefik server on http ports 80 and 443. Software development groups will then start docker containers with the appropriate labels, and thus …

---

## [HTTP/1.0 Protocol Downgrade (PCI DSS) - Is it possible to reject HTTP/1.0 requests in Traefik?](https://community.traefik.io/t/http-1-0-protocol-downgrade-pci-dss-is-it-possible-to-reject-http-1-0-requests-in-traefik/29981)

<div class="topic-metadata">

**Author:** [@westsidetechsolution](https://community.traefik.io/u/westsidetechsolution)\
**Replies:** 2\
**Last updated:** [August 25, 2026, 7:48am UTC](https://community.traefik.io/t/http-1-0-protocol-downgrade-pci-dss-is-it-possible-to-reject-http-1-0-requests-in-traefik/29981 "2026-08-25T07:48:03Z")

</div>

I'm trying to satisfy a PCI DSS ASV scan that fails with the following finding: HTTP/1.0 Protocol Downgrade Detected The recommendation from the PCI vendor is that the server should reject HTTP/1.0 requests and only …

---

## [Unable to follow "Getting Started" guide, cannot install Traefik on Kubernetes via Helm](https://community.traefik.io/t/unable-to-follow-getting-started-guide-cannot-install-traefik-on-kubernetes-via-helm/29881)

<div class="topic-metadata">

**Author:** [@julianwong](https://community.traefik.io/u/julianwong)\
**Replies:** 1\
**Last updated:** [September 10, 2026, 11:15am UTC](https://community.traefik.io/t/unable-to-follow-getting-started-guide-cannot-install-traefik-on-kubernetes-via-helm/29881 "2026-09-10T11:15:24Z")

</div>

Hello, I'm trying to follow the Kubernetes setup for Traefik here: However, I am unable to successfully complete the step "Install the Traefik Using the Helm Values." After installing PS\> helm install traefik traefik…

---

## [Traefik Middleware Plugin Download Fails Sites Dependent on It](https://community.traefik.io/t/traefik-middleware-plugin-download-fails-sites-dependent-on-it/29760)

<div class="topic-metadata">

**Author:** [@j0nny55555](https://community.traefik.io/u/j0nny55555)\
**Replies:** 1\
**Last updated:** [September 6, 2026, 6:08am UTC](https://community.traefik.io/t/traefik-middleware-plugin-download-fails-sites-dependent-on-it/29760 "2026-09-06T06:08:48Z")

</div>

Really quick, the subject describes it - and I found the solution and was curious if there was any intent to make this more standardized, at least in documentation? The Traefik instances will come up, but the sites that…

[Next page](https://community.traefik.io/c/traefik/5.md?page=1)
