basicAuth exists, but applied to a wrong host

Traefik Traefik v2 (latest)
1

Hello, I'm trying to set up basic authorization for Photoprism, but it gets weird - I get two hosts in HTTP Routers, Host(photoprism.local) and Host(app-photoprism).
The middleware exists for the second one, and I need to log in manually on photoprism.local.

Here is the traefik piece of my docker-compose.yml

services:
  photoprism:
    image: photoprism/photoprism:latest
    networks:
      - internal
      - traefik_net
    labels:
      # traefik common
      - "traefik.enable=true"
      - "traefik.docker.network=traefik_net"
      - "traefik.http.routers.photoprism.rule=Host(`photoprism.local`)"
      - "traefik.http.services.photoprism.loadbalancer.server.port=2342"
      - "traefik.http.routers.photprism.middlewares=user-auth@file"

I have the same problem with other services - I get two hosts for every app, service_name.local and service_name-service_name.

What do I miss here?

2

You have the .local domain and assign the middleware, so it requires auth. What’s the problem?

Share your full Traefik static and dynamic config, and docker-compose.yml if used.

3

Traefik should perform the authorization, but it doesn't?

traefik1
traefik1697×137 10.4 KB

version: "3.7"


networks:
  default:
    name: traefik_net
    external: "true"


services:
  traefik:
    image: "traefik:v2.10.3"
    container_name: "traefik"
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    ports:
      - "80:80"
      - "8080:8080"
      - "443:443"
    volumes:
    - /etc/localtime:/etc/localtime:ro
    - /var/run/docker.sock:/var/run/docker.sock:ro
    - /docker/traefic/dynamic.yml:/dynamic.yml:ro

    command:
      # - --log.level=DEBUG
      - --api
      - --api.dashboard=true
      - --api.insecure=true
      - --providers.docker=true
      - --entrypoints.web.address=:80
      - --providers.file.filename=/dynamic.yml # Load dynamic configuration from a file
      - --providers.file.watch=true

    labels:
      traefik.enable: 'true'
      # put a domain only available in your local network
      traefik.http.routers.traefik.rule: Host(`traefik.local`)
      traefik.http.routers.traefik.entrypoints: web
      traefik.http.routers.traefik.service: api@internal
      traefik.docker.network: traefik_net
      ## Middlewares
      traefik.http.routers.traefik.middlewares: user-auth@file,yacht@file


http:
  middlewares:
    user-auth:
      basicAuth:
        users:
          - "admin:pass"

    yacht:
      basicAuth:
        users:
         - "admin:pass"