# Migration Help - global Basic Auth with Dashboard

**URL:** <https://community.traefik.io/t/migration-help-global-basic-auth-with-dashboard/5501>\
**Category:** Traefik v2\
**Tags:** middleware, docker\
**Created:** [April 15, 2020, 8:26am UTC](https://community.traefik.io/t/migration-help-global-basic-auth-with-dashboard/5501 "2020-04-15T08:26:17Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![gdomod](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/gdomod/32/1924_2.png) [@gdomod](https://community.traefik.io/u/gdomod)\
**Post date:** [April 15, 2020, 8:26am UTC](https://community.traefik.io/t/migration-help-global-basic-auth-with-dashboard/5501/1 "2020-04-15T08:26:17Z")

</div>

Hi there, im poweruser 😉 of traefik 1.7 but letsencrypt runs out of support. ok time for new things.

In old settings i have basicauth for all my services and only https, can anybody help me to migrate my old settings.

```auto
[api]
  entryPoint = "admin"
  dashboard = true
  address = ":8080"
  debug = true

[entryPoints] 
  [entryPoints.admin]
    address = ":8080"

  [entryPoints.https]
    address = ":12345"
    [entryPoints.https.auth]
     [entryPoints.https.auth.basic]
      removeHeader = true
      users = [
       "user:hash"
      ]
    [entryPoints.https.tls]

RULES:
[backends]
  [backends.admin]
   [backends.admin.servers]
    [backends.admin.servers.server0]
    url = "http://127.0.0.1:8000"

[frontends]
  [frontends.admin]
   entrypoints = ["https"]
   backend = "admin"
   passHostHeader = true
   #passTLSCert = true

   [frontends.admin.routes]
    [frontends.admin.routes.route0]
     rule = "PathPrefixStrip:/admin"

```

---

<div class="post-metadata">

**Author:** ![gdomod](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/gdomod/32/1924_2.png) [@gdomod](https://community.traefik.io/u/gdomod)\
**Post date:** [April 15, 2020, 8:59am UTC](https://community.traefik.io/t/migration-help-global-basic-auth-with-dashboard/5501/2 "2020-04-15T08:59:12Z")

</div>

I try settings inside composer without tomls  
i just have problems to enable basicauth to all my services inclusive /admin or /dashboard

maybe i need to edit with command --entrypoints.websecure.http.middlewares.basicauth.users ? but i didnt found documentation

```auto
version: "3.6"
networks:
  default:
    driver: bridge
  internal:
    internal: true
    external:
      name: internal
services:
  traefik:
    hostname: traefik
    image: traefik:latest
    container_name: traefik
    restart: always
    domainname: example.com
    networks:
      - default
      - internal
    ports:
      - "12345:12345"
    command:
      "--providers.docker=true"
      "--defaultentrypoints=websecure"
      
      "--entryPoints=Name:websecure Address::12345 TLS"
      "--providers.docker.exposedByDefault=false"

      "--entryPoints.websecure.address=:12345"

      ## GLOBAL AUTH ?     
      "--entryPoints.websecure.basicauth.removeHeader=true"
      "--entryPoints.websecure.basicauth.users=user:hash"

      "--api.dashboard=true"
      
      
      #####ACME   
      "--certificatesResolvers.myresolver.acme.email=user@mail.de"
      "--certificatesResolvers.myresolver.acme.storage=acme.json"
      "--certificatesResolvers.myresolver.acme.dnsChallenge.provider=netcup"
      "--certificatesResolvers.myresolver.acme.dnsChallenge.delayBeforeCheck=900"
      "--certificatesResolvers.myresolver.acme.dnsChallenge.resolvers=8.8.8.8:53, 8.8.4.4:53,46.38.225.230:53"

    environment:
      - NETCUP_CUSTOMER_NUMBER=
      - NETCUP_API_PASSWORD=
      - NETCUP_API_KEY=
    labels:
      - "traefik.enable=true"

      ## GLOBAL AUTH ?
      #- "traefik.http.routers.admin.rule=Host(`example.com`) && PathPrefix(`/admin`)"
      #- "traefik.http.routers.admin.middlewares=admin-stripprefix"
      #- "traefik.http.middlewares.admin-stripprefix.stripprefix.prefixes=/admin"

      ####DASHBOARD
      - "traefik.http.routers.api.rule=PathPrefix('/admin')"
      - "traefik.http.routers.api.service=api@internal"
      - "traefik.http.routers.api.middlewares=auth"
      - "traefik.http.middlewares.auth.basicauth.users=user:hash"

    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - /root/config/traefik/data:/etc/traefik
      - /root/config/traefik/shared:/shared

```

---

<div class="post-metadata">

**Author:** ![ldez](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/ldez/32/5_2.png) [@ldez](https://community.traefik.io/u/ldez)\
**Post date:** [April 15, 2020, 10:09am UTC](https://community.traefik.io/t/migration-help-global-basic-auth-with-dashboard/5501/3 "2020-04-15T10:09:53Z")

</div>

Hello,

something like that:

```auto
version: '3.7'

services:
  traefik:
    image: traefik:v2.2.0
    command:
      - --log.level=DEBUG
      - --api
      
      - --providers.docker.exposedbydefault=false
      
      - --entrypoints.web.address=:80
      - --entrypoints.web.http.redirections.entrypoint.to=websecure
      - --entrypoints.web.http.redirections.entrypoint.scheme=https
      
      - --entrypoints.websecure.address=:443
      - --entrypoints.websecure.http.tls=true
      - --entrypoints.websecure.http.tls.certResolver=leresolver
      - --entrypoints.websecure.http.middlewares=auth@docker

      - --certificatesresolvers.leresolver.acme.email=your@email.com
      - --certificatesresolvers.leresolver.acme.storage=/letsencrypt/acme.json
      - --certificatesresolvers.leresolver.acme.tlschallenge=true
    ports:
      - 80:80
      - 443:443
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./letsencrypt/:/letsencrypt
    labels:
      traefik.enable: true

      # Dashboard
      traefik.http.routers.traefik.rule: Host(`traefik.localhost`)
      traefik.http.routers.traefik.entrypoints: websecure
      traefik.http.routers.traefik.service: api@internal
      

      traefik.http.middlewares.auth.basicauth.users: user:$$apr1$$q8eZFHjF$$Fvmkk//V6Btlaf2i/ju5n/ # user/password

  whoami:
    image: containous/whoami:v1.5.0
    labels:
      traefik.enable: true

      traefik.http.routers.app.rule: Host(`whoami.localhost`)
      traefik.http.routers.app.entrypoints: websecure

```

- [https://docs.traefik.io/v2.2/routing/entrypoints/#http-options](https://docs.traefik.io/v2.2/routing/entrypoints/#http-options)
- [https://docs.traefik.io/v2.2/migration/v1-to-v2/](https://docs.traefik.io/v2.2/migration/v1-to-v2/)