# Traefik v2 **URL:** https://community.traefik.io/c/traefik/traefik-v2/10.md?page=1 [Latest](https://community.traefik.io/latest.md) · [Categories](https://community.traefik.io/categories.md) · [Tags](https://community.traefik.io/tags.md) **Page:** 2 --- ## [Middleware that functions like nginx sub\_filter?](https://community.traefik.io/t/middleware-that-functions-like-nginx-sub-filter/7838)
**Author:** [@tdy](https://community.traefik.io/u/tdy)\ **Replies:** 2\ **Last updated:** [November 10, 2025, 9:44am UTC](https://community.traefik.io/t/middleware-that-functions-like-nginx-sub-filter/7838 "2025-11-10T09:44:21Z")
Hey there Is it possible to create a middleware for Traefik that functions like the nginx sub\_filter module? I would love to be able to inject custom CSS in a service where I don't have the option to modify the source … --- ## [FIXED / How to add the missing trailing slash? (RedirectRegex + stripprefixregex) no need for ReplacePathRegex](https://community.traefik.io/t/fixed-how-to-add-the-missing-trailing-slash-redirectregex-stripprefixregex-no-need-for-replacepathregex/3816)
**Author:** [@pascalandy](https://community.traefik.io/u/pascalandy)\ **Replies:** 7\ **Last updated:** [November 5, 2025, 6:00am UTC](https://community.traefik.io/t/fixed-how-to-add-the-missing-trailing-slash-redirectregex-stripprefixregex-no-need-for-replacepathregex/3816 "2025-11-05T06:00:10Z")
Hi, In the screenshot above, portainer is stucked in this weird state without the /. At the moment, I need to add it manually. Per example mydomain.club/portainer/ EDIT: it's not limited to portainer As I'm migratin… --- ## [Is plugin server in maintenance mode? my plulgin is not publish in catalog](https://community.traefik.io/t/is-plugin-server-in-maintenance-mode-my-plulgin-is-not-publish-in-catalog/28934)
**Author:** [@jake-bcn](https://community.traefik.io/u/jake-bcn)\ **Replies:** 1\ **Last updated:** [October 31, 2025, 3:37am UTC](https://community.traefik.io/t/is-plugin-server-in-maintenance-mode-my-plulgin-is-not-publish-in-catalog/28934 "2025-10-31T03:37:35Z")
my github address is : GitHub - jake-bcn/test-traefik-go-log: test plugin of traefik and no issue is assign to me by traefik --- ## [Upload size \>2GB?](https://community.traefik.io/t/upload-size-2gb/15707)
**Author:** [@codeagency](https://community.traefik.io/u/codeagency)\ **Replies:** 6\ **Last updated:** [October 23, 2025, 10:45am UTC](https://community.traefik.io/t/upload-size-2gb/15707 "2025-10-23T10:45:50Z")
Hello How do I configure traefik v2.7.x to handle uploads that are \>2GB? I'm hosting an application which takes backup file via a web interface to restore, but as soon as I go larger than 2GB, it breaks the entire appl… --- ## [Real Client-Ip with Cloudflare, Docker, Traefik and nginx set up as a mail proxy (Client-Ip in PHP script, not in upstream mail server)](https://community.traefik.io/t/real-client-ip-with-cloudflare-docker-traefik-and-nginx-set-up-as-a-mail-proxy-client-ip-in-php-script-not-in-upstream-mail-server/13842)
**Author:** [@frugan](https://community.traefik.io/u/frugan)\ **Replies:** 1\ **Last updated:** [October 14, 2025, 8:31pm UTC](https://community.traefik.io/t/real-client-ip-with-cloudflare-docker-traefik-and-nginx-set-up-as-a-mail-proxy-client-ip-in-php-script-not-in-upstream-mail-server/13842 "2025-10-14T20:31:11Z")
Hi there, i set nginx as a mail proxy, but i have trouble detecting the real Client-Ip in the php authentication script called by nginx via auth\_http. I am not interested in getting real-IP on the upstream mail server. … --- ## [How to overwrite middleware (headers) attached to the entrypoint?](https://community.traefik.io/t/how-to-overwrite-middleware-headers-attached-to-the-entrypoint/16698)
**Author:** [@MacGyver27](https://community.traefik.io/u/MacGyver27)\ **Replies:** 14\ **Last updated:** [October 13, 2025, 9:48am UTC](https://community.traefik.io/t/how-to-overwrite-middleware-headers-attached-to-the-entrypoint/16698 "2025-10-13T09:48:40Z")
Hello. I am curious how I am supposed to overwrite headers middleware in a specific router. My case is that I have attached to the default entry-point sitting on port 443 security headers to block indexing.. However I w… --- ## [Cannot get real IP address - Rootless Docker + Traefik + Apache](https://community.traefik.io/t/cannot-get-real-ip-address-rootless-docker-traefik-apache/28837)
**Author:** [@cornal](https://community.traefik.io/u/cornal)\ **Replies:** 1\ **Last updated:** [October 11, 2025, 12:05am UTC](https://community.traefik.io/t/cannot-get-real-ip-address-rootless-docker-traefik-apache/28837 "2025-10-11T00:05:25Z")
Hi. I’m using Traefik 2.10 via rootless Docker, which acts as a reverse proxy for Apache. The hosting works but I can’t get it to give me the real IP address of clients. Apache is set up properly to trust the local Doc… --- ## [Trouble setting up Traefik on a Synology NAS in Docker](https://community.traefik.io/t/trouble-setting-up-traefik-on-a-synology-nas-in-docker/22336)
**Author:** [@Matt\_UKTX](https://community.traefik.io/u/Matt_UKTX)\ **Replies:** 3\ **Last updated:** [October 6, 2025, 1:33am UTC](https://community.traefik.io/t/trouble-setting-up-traefik-on-a-synology-nas-in-docker/22336 "2025-10-06T01:33:53Z")
Hi, I'm new here and looking for a little help. Before I dive into my issue, please know that I did search high and low for a solution online, using google, chatgpt and anything else at my disposal. So far, I'm coming … --- ## [Sharing certificate between different namespaces](https://community.traefik.io/t/sharing-certificate-between-different-namespaces/26533)
**Author:** [@markrity](https://community.traefik.io/u/markrity)\ **Replies:** 2\ **Last updated:** [October 2, 2025, 1:06pm UTC](https://community.traefik.io/t/sharing-certificate-between-different-namespaces/26533 "2025-10-02T13:06:46Z")
Hi, we have different IngressRoute objects on different namespaces , but we use the same wildcard certificate for all those IngressRoutes. Each IngressRoute has this at tls: tls: options: name: tls-options … --- ## [How does ingressRoute in another namespace use 1 TLS secret in the traffic-proxy namespace?](https://community.traefik.io/t/how-does-ingressroute-in-another-namespace-use-1-tls-secret-in-the-traffic-proxy-namespace/11899)
**Author:** [@arsyam](https://community.traefik.io/u/arsyam)\ **Replies:** 1\ **Last updated:** [October 2, 2025, 12:55pm UTC](https://community.traefik.io/t/how-does-ingressroute-in-another-namespace-use-1-tls-secret-in-the-traffic-proxy-namespace/11899 "2025-10-02T12:55:00Z")
Hello, I installed version 2 traffic proxy, and I have 5 namespaces. I created 1 TLS secret in 1 namespace (traefik-proxy namespace). How does ingressRoute in another namespace use TLS secret in the traffic-proxy name… --- ## [InfluxDB2 Metrics, Static config and env variables](https://community.traefik.io/t/influxdb2-metrics-static-config-and-env-variables/14684)
**Author:** [@tam481](https://community.traefik.io/u/tam481)\ **Replies:** 4\ **Last updated:** [September 30, 2025, 8:19am UTC](https://community.traefik.io/t/influxdb2-metrics-static-config-and-env-variables/14684 "2025-09-30T08:19:39Z")
Hello I'm trying to set the InfluxDB2 token and org via the following env variables: TRAEFIK\_METRICS\_INFLUXDB2\_ORG: TRAEFIK\_METRICS\_INFLUXDB2\_TOKEN: These are set in a .env file loaded from the docker-compose yaml fil… --- ## [ipWhiteList with excludedIPs setting will result in empty IP address when there is 1 IP address in X-Forwarded-For Header](https://community.traefik.io/t/ipwhitelist-with-excludedips-setting-will-result-in-empty-ip-address-when-there-is-1-ip-address-in-x-forwarded-for-header/17491)
**Author:** [@Catcher8182](https://community.traefik.io/u/Catcher8182)\ **Replies:** 3\ **Last updated:** [September 28, 2025, 11:41pm UTC](https://community.traefik.io/t/ipwhitelist-with-excludedips-setting-will-result-in-empty-ip-address-when-there-is-1-ip-address-in-x-forwarded-for-header/17491 "2025-09-28T23:41:57Z")
Description Hey guys, I noticed that when there is 1 IP address in the X-Forwarded-For header and I am using the ipStrategy.excludedIPs or ipStrategy.depth=1 setting, it will always return an empty IP address. This resul… --- ## [Default container / Wildcard Host rule](https://community.traefik.io/t/default-container-wildcard-host-rule/23977)
**Author:** [@lukas.pavljuk](https://community.traefik.io/u/lukas.pavljuk)\ **Replies:** 6\ **Last updated:** [September 22, 2025, 7:58pm UTC](https://community.traefik.io/t/default-container-wildcard-host-rule/23977 "2025-09-22T19:58:12Z")
Hello everyone, I am trying to deploy a sort of "catch-all" container for requests with an unknown Host header (Or rather, host header of a domain, for which I don't yet have a matching container) E.g.: I have a conta… --- ## [External Pihole behind Traefik redirect /admin](https://community.traefik.io/t/external-pihole-behind-traefik-redirect-admin/17383)
**Author:** [@danyo2008](https://community.traefik.io/u/danyo2008)\ **Replies:** 19\ **Last updated:** [September 17, 2025, 8:38am UTC](https://community.traefik.io/t/external-pihole-behind-traefik-redirect-admin/17383 "2025-09-17T08:38:31Z")
Hi all, i have pihole installed on a different machine, so pi hole do not run as a docker container next to Traefik. What i have done is, that i added pihole as an external router to my config.yml. If i access the URL… --- ## [Routing certain Paths to different Docker containers](https://community.traefik.io/t/routing-certain-paths-to-different-docker-containers/28628)
**Author:** [@OssNass](https://community.traefik.io/u/OssNass)\ **Replies:** 1\ **Last updated:** [September 17, 2025, 4:57am UTC](https://community.traefik.io/t/routing-certain-paths-to-different-docker-containers/28628 "2025-09-17T04:57:54Z")
I have a server which we use to publish our products using docker containers and Traefik reverse proxy server The new “Frontend” of our application is defined using the following information: services: frontend: … --- ## [Importing traefik TLS certs into IOS](https://community.traefik.io/t/importing-traefik-tls-certs-into-ios/28597)
**Author:** [@talowicz](https://community.traefik.io/u/talowicz)\ **Replies:** 2\ **Last updated:** [September 13, 2025, 2:20pm UTC](https://community.traefik.io/t/importing-traefik-tls-certs-into-ios/28597 "2025-09-13T14:20:55Z")
Hello! Getting an error on the IOS apps for jellyfin and immich when deploying behind traefik. I am forcing https and using the traefik generated TLS certs, but dont know how to import them into my IOS devices or a brow… --- ## [Unable to create certificates on Ubuntu 22.04 even with valid API key](https://community.traefik.io/t/unable-to-create-certificates-on-ubuntu-22-04-even-with-valid-api-key/28542)
**Author:** [@PhreakyPhool](https://community.traefik.io/u/PhreakyPhool)\ **Replies:** 1\ **Last updated:** [September 8, 2025, 8:32am UTC](https://community.traefik.io/t/unable-to-create-certificates-on-ubuntu-22-04-even-with-valid-api-key/28542 "2025-09-08T08:32:18Z")
Hello everyone, I’m running Traefik on Ubuntu 22.04 inside Docker and I’m facing issues with certificate creation. Despite having a valid Cloudflare API key configured, the certificates are not being generated. I can s… --- ## [API not accessible when Traefik in host network mode](https://community.traefik.io/t/api-not-accessible-when-traefik-in-host-network-mode/13321)
**Author:** [@simonszu](https://community.traefik.io/u/simonszu)\ **Replies:** 3\ **Last updated:** [August 29, 2025, 3:39pm UTC](https://community.traefik.io/t/api-not-accessible-when-traefik-in-host-network-mode/13321 "2025-08-29T15:39:59Z")
I am running Traefik on a simple single-node docker host. I had a successful configuration in the past with port-forwarding, but decided to let Traefik run with host network mode to get useful source IP addresses, for ex… --- ## [Laravel login redirects back to /login with \_token, email, password in query string](https://community.traefik.io/t/laravel-login-redirects-back-to-login-with-token-email-password-in-query-string/28203)
**Author:** [@Narogos](https://community.traefik.io/u/Narogos)\ **Replies:** 8\ **Last updated:** [August 28, 2025, 8:07pm UTC](https://community.traefik.io/t/laravel-login-redirects-back-to-login-with-token-email-password-in-query-string/28203 "2025-08-28T20:07:05Z")
Hi, After submitting the login form in a Laravel application (running behind Traefik as a reverse proxy), instead of being authenticated the user is redirected back to /login with URL parameters like \_token=...&email=..… --- ## [Let's Encrypt certificate on gandiv5 with Personal Access Token (PAT)](https://community.traefik.io/t/lets-encrypt-certificate-on-gandiv5-with-personal-access-token-pat/21399)
**Author:** [@ramor](https://community.traefik.io/u/ramor)\ **Replies:** 9\ **Last updated:** [August 24, 2025, 9:06pm UTC](https://community.traefik.io/t/lets-encrypt-certificate-on-gandiv5-with-personal-access-token-pat/21399 "2025-08-24T21:06:34Z")
Hi I'm on Traefik version 2.10.7 on windows, trying to get let's encrypt working with gandi live DNS (gandi v5 REST API, last version) I've been struggling with this for almost a week, and I think I found the issue Fo… --- ## [Impact of setting \`maxIdleConnsPerHost\` to 0 or -1](https://community.traefik.io/t/impact-of-setting-maxidleconnsperhost-to-0-or-1/25663)
**Author:** [@iuwqyir](https://community.traefik.io/u/iuwqyir)\ **Replies:** 1\ **Last updated:** [August 19, 2025, 8:29pm UTC](https://community.traefik.io/t/impact-of-setting-maxidleconnsperhost-to-0-or-1/25663 "2025-08-19T20:29:09Z")
Hello, We use traefik infront of our production k8s cluster and it is serving around 5000 RPS. Around 0.1% - 0.5% of the requests started getting 502 responses. Looking into it, the requests never reach the services in… --- ## [Global 404 handler](https://community.traefik.io/t/global-404-handler/2144)
**Author:** [@gingerbreadassassin](https://community.traefik.io/u/gingerbreadassassin)\ **Replies:** 18\ **Last updated:** [August 15, 2025, 6:29am UTC](https://community.traefik.io/t/global-404-handler/2144 "2025-08-15T06:29:14Z")
Is there some way to globally apply default middlewares, e.g. Errors? Currently, if I specify a subdomain to my instance of traefik 2.0, it serves up the traefik default cert and I don't even get a 404 in my browser, ju… --- ## [Certificate error I want to debug](https://community.traefik.io/t/certificate-error-i-want-to-debug/28138)
**Author:** [@jcabrerazuniga](https://community.traefik.io/u/jcabrerazuniga)\ **Replies:** 0\ **Last updated:** [August 8, 2025, 8:51pm UTC](https://community.traefik.io/t/certificate-error-i-want-to-debug/28138 "2025-08-08T20:51:30Z")
I have Traefik running installed with the latest version of microk8s. After the installation I got the next error/warning: W0808 16:11:50.754726 1 reflector.go:441\] k8s.io/client-go@v0.22.1/tools/cache/reflector.… --- ## [Sporadic "404 page not found" on docker push to local K3s Registry on ARM64 VM (UTM/QEMU) - I/O Bottleneck?](https://community.traefik.io/t/sporadic-404-page-not-found-on-docker-push-to-local-k3s-registry-on-arm64-vm-utm-qemu-i-o-bottleneck/28126)
**Author:** [@AndrejS](https://community.traefik.io/u/AndrejS)\ **Replies:** 0\ **Last updated:** [August 8, 2025, 6:46am UTC](https://community.traefik.io/t/sporadic-404-page-not-found-on-docker-push-to-local-k3s-registry-on-arm64-vm-utm-qemu-i-o-bottleneck/28126 "2025-08-08T06:46:05Z")
Hi everyone, I'm reaching out for help with a persistent issue I've been troubleshooting for days. I'm running a local K3s cluster and trying to deploy a private Docker Registry (registry:2 image) for my home network us… --- ## [Unit of "Duration" and "OriginDuration" in access log](https://community.traefik.io/t/unit-of-duration-and-originduration-in-access-log/7260)
**Author:** [@pschichtel](https://community.traefik.io/u/pschichtel)\ **Replies:** 2\ **Last updated:** [July 29, 2025, 10:06am UTC](https://community.traefik.io/t/unit-of-duration-and-originduration-in-access-log/7260 "2025-07-29T10:06:54Z")
Hi everyone! I have not found any documentation about this, but I also haven't checked the code. What time unit are these fields in? I have a case where a factor 1000 bigger or smaller would still be plausible. Thanks… --- ## [Infinite authentication loop after adding basic auth](https://community.traefik.io/t/infinite-authentication-loop-after-adding-basic-auth/14877)
**Author:** [@foxcris](https://community.traefik.io/u/foxcris)\ **Replies:** 8\ **Last updated:** [July 22, 2025, 7:03pm UTC](https://community.traefik.io/t/infinite-authentication-loop-after-adding-basic-auth/14877 "2025-07-22T19:03:38Z")
hi, i just tried to add basic auth and tls to the api/dashboard site of traefik. TLS is working but basic auth is ending in an infinite auth loop. I used the following configuration options: traefik.enable: 'true' tra… --- ## [Consul Connect Bad Gateway](https://community.traefik.io/t/consul-connect-bad-gateway/12864)
**Author:** [@Fred-gb](https://community.traefik.io/u/Fred-gb)\ **Replies:** 2\ **Last updated:** [July 21, 2025, 5:58pm UTC](https://community.traefik.io/t/consul-connect-bad-gateway/12864 "2025-07-21T17:58:30Z")
Hi, After this post: https://community.traefik.io/t/consul-connect-backend-in-https-instead-http I tried to understand why https backend and I found answer with this video: Simplifying Infrastructure and Network Automa… --- ## [DNS Challenge not working with CNAMEd domains](https://community.traefik.io/t/dns-challenge-not-working-with-cnamed-domains/12030)
**Author:** [@bgeneto](https://community.traefik.io/u/bgeneto)\ **Replies:** 6\ **Last updated:** [July 20, 2025, 8:54pm UTC](https://community.traefik.io/t/dns-challenge-not-working-with-cnamed-domains/12030 "2025-07-20T20:54:39Z")
I'm trying to use Traefik v2 dns challenge with duckdns along with a CNAMEd domain without success. If I use duckdns.org directly, say mydomain.duckdns.org in the static config it works: websecure: address: :443 … --- ## [Cannot get Adminer to work on Traefik v2](https://community.traefik.io/t/cannot-get-adminer-to-work-on-traefik-v2/5005)
**Author:** [@standerksen](https://community.traefik.io/u/standerksen)\ **Replies:** 2\ **Last updated:** [July 19, 2025, 5:17pm UTC](https://community.traefik.io/t/cannot-get-adminer-to-work-on-traefik-v2/5005 "2025-07-19T17:17:36Z")
Hi. I am trying to figure out how to get seperate websites with their own docker-compose file to work on my server. The domain example.com points to my server. The WordPress blog is running fine (except for the fact that… --- ## [Struggling to get sniStrict working in my environment](https://community.traefik.io/t/struggling-to-get-snistrict-working-in-my-environment/27948)
**Author:** [@tatsu14](https://community.traefik.io/u/tatsu14)\ **Replies:** 0\ **Last updated:** [July 18, 2025, 12:55pm UTC](https://community.traefik.io/t/struggling-to-get-snistrict-working-in-my-environment/27948 "2025-07-18T12:55:15Z")
Hi, I am trying to activate / configure the sniStrict option to prevent answering a request to a host / domain that is not configured in my ingressroute rules with the traefik default self-signed certificate. I want to… [Previous page](https://community.traefik.io/c/traefik/traefik-v2/10.md) [Next page](https://community.traefik.io/c/traefik/traefik-v2/10.md?page=2)