Good day, I have applied a global HTTP -> HTTPS redirection using this this approach and it works fine. Additionally, I would like to add global www -> non-www redirection, which gets applied to any route. This my static configuration: # static configuration [entryPoints] [entryPoints.web] address = ":80" [entryPoints.web-secure] address = ":443" I have added additional router, middleware and noop service, so my configuration looks like this: # dynamic configuration [http.routers] [http.routers.redirect-to-https] entryPoints = ["web"] middlewares = ["https-redirect"] rule = "HostRegexp(`{host:.+}`)" service = "noop" [http.routers.redirect-to-nonwww] entryPoints = ["web-secure"] middlewares = ["nonwww-redirect"] rule = "HostRegexp(`{host:(www.+)}`)" service = "noop2" [http.middlewares] [http.middlewares.https-redirect.redirectScheme] scheme = "https" permanent = true [http.middlewares.nonwww-redirect.redirectRegex] regex = "^https://www.(.*)" replacement = "https://$1" permanent = true [http.services] [http.services.noop.loadBalancer] [[http.services.noop.loadBalancer.servers]] url = "http://192.168.0.1" [http.services.noop2.loadBalancer] [[http.services.noop2.loadBalancer.servers]] url = "http://192.168.0.2" If I try this configuration, the the www -> non-www redirection does not work. However, if I try to apply the redirect middleware directly within a Docker service: whoami: image: containous/whoami labels: - "traefik.enable=true" - "traefik.http.routers.whoami.entrypoints=web-secure" - "traefik.http.routers.whoami.rule=HostRegexp(`{host:(www.)?example.com}`)" - "traefik.http.routers.whoami.tls.certResolver=web" - "traefik.http.routers.whoami.middlewares=nonwww-redirect@file" it does work. But still, this approach is not global. First thing that occurred to me is the fact that the redirect-to-nonwww router gets a lower priority than any other application router because its rule is simply shorter. I tried setting the priority: [http.routers.redirect-to-nonwww] entryPoints = ["web-secure"] middlewares = ["nonwww-redirect"] rule = "HostRegexp(`{host:(www.+)}`)" service = "noop2" priority = 100 but with no success. Is there a chance to apply both HTTPS redirection and www -> non-www redirection globally? Thank you!

To answer to original question, a global approach can be: 🐋 With the Docker provider: version: '3.7' services: traefik: image: traefik:v2.1.3 command: - --entrypoints.web.address=:80 - --entrypoints.websecure.address=:443 - --providers.docker=true - --providers.docker.exposedbydefault=false - --log.level=INFO ports: - 80:80 - 443:443 volumes: - /var/run/docker.sock:/var/run/docker.sock:ro labels: traefik.enable: true # Global redirection: http to https traefik.http.routers.http-catchall.rule: HostRegexp(`{host:(www\.)?.+}`) traefik.http.routers.http-catchall.entrypoints: web traefik.http.routers.http-catchall.middlewares: wwwtohttps # Global redirection: https (www.) to https traefik.http.routers.wwwsecure-catchall.rule: HostRegexp(`{host:(www\.).+}`) traefik.http.routers.wwwsecure-catchall.entrypoints: websecure traefik.http.routers.wwwsecure-catchall.tls: true traefik.http.routers.wwwsecure-catchall.middlewares: wwwtohttps # middleware: http(s)://(www.) to https:// traefik.http.middlewares.wwwtohttps.redirectregex.regex: ^https?://(?:www\.)?(.+) traefik.http.middlewares.wwwtohttps.redirectregex.replacement: https://$${1} traefik.http.middlewares.wwwtohttps.redirectregex.permanent: true whoami: image: containous/whoami labels: traefik.enable: true traefik.http.routers.whoami.rule: Host(`whoami.localhost`) traefik.http.routers.whoami.entrypoints: websecure traefik.http.routers.whoami.tls: true 🗒️ With the File provider: traefik.toml (static configuration) [entryPoints.web] address = ":80" [entryPoints.websecure] address = ":443" [providers.file] directory = "/dyn/" [log] level = "INFO" /dyn/global_redirection.toml (dynamic configuration) # Global redirection: http to https [http.routers.http-catchall] rule = "HostRegexp(`{host:(www\\.)?.+}`)" entryPoints = ["web"] middlewares = ["wwwtohttps"] service = "noop" # Global redirection: https (www.) to https [http.routers.wwwsecure-catchall] rule = "HostRegexp(`{host:(www\\.).+}`)" entryPoints = ["websecure"] middlewares = ["wwwtohttps"] service = "noop" [http.routers.wwwsecure-catchall.tls] # middleware: http(s)://(www.) to https:// [http.middlewares.wwwtohttps.redirectregex] regex = "^https?://(?:www\\.)?(.+)" replacement = "https://${1}" permanent = true # NOOP service [http.services.noop] [[http.services.noop.loadBalancer.servers]] url = "http://192.168.0.1:666" 🚢 With the Kubernetes CRD provider: apiVersion: traefik.containo.us/v1alpha1 kind: IngressRoute metadata: name: http_catchall namespace: bar spec: entryPoints: - web routes: - match: 'HostRegexp(`{host:(www\.)?.+}`)' kind: Rule middlewares: - name: wwwtohttps services: - name: foo-svc port: 666 --- apiVersion: traefik.containo.us/v1alpha1 kind: IngressRoute metadata: name: wwwsecure_catchall namespace: bar spec: entryPoints: - websecure routes: - match: 'HostRegexp(`{host:(www\.).+}`)' kind: Rule middlewares: - name: wwwtohttps services: - name: foo-svc port: 666 tls: {} --- apiVersion: traefik.containo.us/v1alpha1 kind: Middleware metadata: name: wwwtohttps namespace: bar spec: redirectRegex: regex: '^https?://(?:www\.)?(.+)' replacement: 'https://${1}' permanent: true Results: Request Redirection http://whoami.localhost -> https://whoami.localhost http://www.whoami.localhost -> https://whoami.localhost https://www.whoami.localhost -> https://whoami.localhost 🐋 FYI another way (less global) to do that: version: '3.7' services: traefik: image: traefik:v2.1.3 command: - --entrypoints.web.address=:80 - --entrypoints.websecure.address=:443 - --providers.docker=true - --providers.docker.exposedbydefault=false - --log.level=INFO ports: - 80:80 - 443:443 volumes: - /var/run/docker.sock:/var/run/docker.sock:ro labels: traefik.enable: true # Global redirection: http to https traefik.http.routers.http_catchall.rule: HostRegexp(`{host:.+}`) traefik.http.routers.http_catchall.entrypoints: web traefik.http.routers.http_catchall.middlewares: tohttps # middleware: http:// to https:// traefik.http.middlewares.tohttps.redirectscheme.scheme: https traefik.http.middlewares.tohttps.redirectscheme.permanent: true # middleware: https://www. to https:// traefik.http.middlewares.trim_www.redirectregex.regex: ^https://www\.(.+) traefik.http.middlewares.trim_www.redirectregex.replacement: https://$${1} traefik.http.middlewares.trim_www.redirectregex.permanent: true whoami: image: containous/whoami labels: traefik.enable: true traefik.http.routers.whoami.rule: Host(`whoami.localhost`, `www.whoami.localhost`) traefik.http.routers.whoami.entrypoints: websecure traefik.http.routers.whoami.middlewares: trim_www traefik.http.routers.whoami.tls: true Note: the redirections are made by routers, the routers are a part of the dynamic configuration, so a CLI flags version is not possible because flags handle the static configuration.

After release of Traefik v2.2 I guess the right approach to make http to https redirection will be: ## Static configuration entryPoints: web: address: ":80" http: redirections: entryPoint: to: websecure scheme: https websecure: address: ":443" Docker www to non-www redirection: labels: # Global redirection: https (www.) to https traefik.http.routers.websecure-catchall.rule: HostRegexp(`{host:(www\.).+}`) traefik.http.routers.websecure-catchall.entrypoints: websecure traefik.http.routers.websecure-catchall.middlewares: wwwtohttps # Middleware: http(s)://(www.) to https:// traefik.http.middlewares.wwwtohttps.redirectregex.regex: ^https?://(?:www\.)?(.+) traefik.http.middlewares.wwwtohttps.redirectregex.replacement: https://$${1} traefik.http.middlewares.wwwtohttps.redirectregex.permanent: true But do we need to add acme resolver for www SSL certificate? traefik.http.routers.websecure-catchall.tls: true traefik.http.routers.websecure-catchall.tls.certresolver: myresolver

For anyone who is looking for a solution, to determine per domain whether it should be www or without www. I made 2 middlewares, which can be set per domain. I was looking after this. but couldn't find a quick answer. That's why i'm sharing my solution here: Part of my global traefik labels (v2.1) labels: # global redirect to https - traefik.http.routers.http-catchall.rule=hostregexp(`{host:.+}`) - traefik.http.routers.http-catchall.entrypoints=http - traefik.http.routers.http-catchall.middlewares=redirect-to-https # middleware redirect - traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https - traefik.http.middlewares.redirect-to-https.redirectscheme.permanent=true # middleware redirect to www - traefik.http.middlewares.redirect-to-www.redirectregex.regex=(https|http)://(?:www.)?(.*) - traefik.http.middlewares.redirect-to-www.redirectregex.replacement=https://www.$${2} # middleware redirect to non-www - traefik.http.middlewares.redirect-to-nonwww.redirectregex.regex=(https|http)://(www\.(.*)) - traefik.http.middlewares.redirect-to-nonwww.redirectregex.replacement=https://$${3} In a website for www. -> redirect to https://www.example.com labels: - traefik.enable=true - traefik.http.services.${SERVICE}-app.loadbalancer.server.port=80 - traefik.http.routers.${SERVICE}-app.rule=host(`example.com`,`www.example.com`) - traefik.http.routers.${SERVICE}-app.entrypoints=https - traefik.http.routers.${SERVICE}-app.tls=true - traefik.http.routers.${SERVICE}-app.tls.certresolver=letsencrypt - traefik.http.routers.${SERVICE}-app.service=${SERVICE}-app - traefik.http.routers.${SERVICE}-app.middlewares=redirect-to-www In a website for no www -> redirect to https://example.com labels: - traefik.enable=true - traefik.http.services.${SERVICE}-app.loadbalancer.server.port=80 - traefik.http.routers.${SERVICE}-app.rule=host(`example.com`,`www.example.com`) - traefik.http.routers.${SERVICE}-app.entrypoints=https - traefik.http.routers.${SERVICE}-app.tls=true - traefik.http.routers.${SERVICE}-app.tls.certresolver=letsencrypt - traefik.http.routers.${SERVICE}-app.service=${SERVICE}-app - traefik.http.routers.${SERVICE}-app.middlewares=redirect-to-nonwww

you can also use the solution in my previous post [image] Global redirect www to non-www with HTTPS redirection To answer to original question, a global approach can be: 🐋 With the Docker provider:version: '3.7' services: traefik: image: traefik:v2.1.3 command: - --entrypoints.web.address=:80 - --entrypoints.websecure.address=:443 ...

Your solution certainly looks good too. And is the answer to the original post. My swarm environment has multiple domains, with different wishes to www or non www and don't want people to go to the wrong url. But they will been forced to the correct www or non www environment. Examples Force to www environment - traefik.http.routers.${SERVICE}-app.middlewares=redirect-to-www Request Redirection http://domain1.localhost -> https://www.domain1.localhost Force to the non-www environment - traefik.http.routers.${SERVICE}-app.middlewares=redirect-to-nonwww Request Redirection http://www.domain2.localhost -> https://domain2.localhost I realize now that the placement of my solution was not completely fitting to question of the tropic starter

A word of note: If you plan on submitting your domain to HSTS preload a single redirect will not work and is against the standard of HSTS. And in my testing, redirects don't support headers (or didn't before).

Hey, Where are you setting the labels in the kubernetesCRD setup? In the deployment YAML or as part of an IngressRoute? Would be great if you could post a more complete yml example of what you did. Thanks!

[image] ldez: [http.routers.wwwsecure-catchall.tls] Big thanks for the code! But... why this? [http.routers.wwwsecure-catchall.tls]

Big thanks for the code! But... why this? [http.routers.wwwsecure-catchall.tls] Could be because traefik 2.2 was not there back then.

In my case (w/ Traefik 2.2.5), without: traefik.http.routers.wwwsecure-catchall.tls: true The rule https://www.whoami.localhost/ -> https://whoami.localhost is broken. Details: # Global redirection: http to https traefik.http.routers.http-catchall.rule: HostRegexp(`{host:(www\.)?.+}`) traefik.http.routers.http-catchall.entrypoints: webinsecure traefik.http.routers.http-catchall.middlewares: wwwtohttps # Global redirection: https (www.) to https traefik.http.routers.wwwsecure-catchall.rule: HostRegexp(`{host:(www\.).+}`) traefik.http.routers.wwwsecure-catchall.entrypoints: websecure traefik.http.routers.wwwsecure-catchall.tls: true # I need this! traefik.http.routers.wwwsecure-catchall.middlewares: wwwtohttps # middleware: http(s)://(www.) to https:// traefik.http.middlewares.wwwtohttps.redirectregex.regex: ^https?://(?:www\.)?(.+) traefik.http.middlewares.wwwtohttps.redirectregex.replacement: https://$${1} traefik.http.middlewares.wwwtohttps.redirectregex.permanent: true

Global redirect www to non-www with HTTPS redirection

Traefik Traefik v2

0xVox May 7, 2020, 12:52pm 30

Hey mate - great work on the solution.

I found the regex in your KubernetesCRD to not work, I had to change
^https?://(?:www\.)?(.+)
To
^https?:\/\/(?:www\.)?(.+)

But otherwise all is well.

Ridirect www to apex domain

Topic		Replies	Views
V2.2.8 Global redirect www to non-www with http to https Traefik v2 letsencrypt-acme , middleware	16	4200	September 22, 2021
Redirect from non-www to www with traefik 2 Traefik v2 docker , cli	9	11907	August 5, 2022
Http to https redirection difference in using CLI vs middelwares Traefik v2 middleware , cli	10	2964	July 14, 2020
Redirect www to non-www not working in V2 Traefik v2 docker	5	1581	April 13, 2020
Global Http to Https Redirect not working Traefik v2 docker-swarm , middleware	4	6973	March 6, 2022

Global redirect www to non-www with HTTPS redirection

Related topics