Is there something like a "traefik service discovery"?

I am trying to set up a frontend Traefik server that can be reached from the internet and can only access other traefik servers on other machines (that mostly run service discovery from docker).

Is there something I can do to facilitate this? Ideally I would setup LetsEncrypt certificates on the frontend server, too.