Hello there, i have issue with redirection. Let me explain, i have two servers on same LAN but one is with traefik and docker, second is Synology NAS.
So main server (Ubuntu 20.04 LTS) got IP example: 192.168.10.1 and NAS: 192.168.10.2 (NAS USING PORT 10051 for web services)
My domain is completly direct to the MAIN SERVER. So lets name it as god.com
traefik.god.com (url of traefik dashboard)
nas.god.com (url of synology nas)
i stored traefik -> /home/archmatt/traefik
Data in traefik folder is -> docker-compose.yml
-> data (folder)
inside data folder is -> config.yml
-> acme.json
-> traefik.yml
docker-compose.yml
version: '3'
services:
traefik:
image: traefik:latest
container_name: traefik
restart: unless-stopped
security_opt:
- no-new-privileges:true
networks:
- proxy
ports:
- 80:80
- 443:443
environment:
- CF_API_EMAIL=name@god.com
# - CF_DNS_API_TOKEN=YOUR_API_TOKEN
- CF_API_KEY=god-cloudflare-api-key
# be sure to use the correct one depending on if you are using a token or key
volumes:
- /etc/localtime:/etc/localtime:ro
- /var/run/docker.sock:/var/run/docker.sock:ro
- /home/archmatt/traefik/data/traefik.yml:/traefik.yml:ro
- /home/archmatt/traefik/data/acme.json:/acme.json
- /home/archmatt/traefik/data/config.yml:/config.yml:ro
labels:
- "traefik.enable=true"
- "traefik.http.routers.traefik.entrypoints=http"
- "traefik.http.routers.traefik.rule=Host(`traefik.god.com`)"
- "traefik.http.middlewares.traefik-auth.basicauth.users=USER:PASSWORD"
- "traefik.http.middlewares.traefik-https-redirect.redirectscheme.scheme=https"
- "traefik.http.middlewares.sslheader.headers.customrequestheaders.X-Forwarded-Proto=https"
- "traefik.http.routers.traefik.middlewares=traefik-https-redirect"
- "traefik.http.routers.traefik-secure.entrypoints=https"
- "traefik.http.routers.traefik-secure.rule=Host(`traefik.god.com`)"
- "traefik.http.routers.traefik-secure.middlewares=traefik-auth"
- "traefik.http.routers.traefik-secure.tls=true"
- "traefik.http.routers.traefik-secure.tls.certresolver=cloudflare"
- "traefik.http.routers.traefik-secure.tls.domains[0].main=god.com"
- "traefik.http.routers.traefik-secure.tls.domains[0].sans=*.god.com"
- "traefik.http.routers.traefik-secure.service=api@internal"
networks:
proxy:
external: true
config.yml
http:
#region routers
routers:
nas:
entryPoints:
- "https"
rule: "Host(`nas.god.com`)"
middlewares:
- default-headers
- https-redirectscheme
tls: {}
service: nas
#endregion
#region services
services:
nas:
loadBalancer:
servers:
- url: "https://192.168.10.2:10051"
passHostHeader: true
#endregion
middlewares:
https-redirectscheme:
redirectScheme:
scheme: https
permanent: true
default-headers:
headers:
frameDeny: true
browserXssFilter: true
contentTypeNosniff: true
forceSTSHeader: true
stsIncludeSubdomains: true
stsPreload: true
stsSeconds: 15552000
customFrameOptionsValue: SAMEORIGIN
customRequestHeaders:
X-Forwarded-Proto: https
idrac:
headers:
frameDeny: true
browserXssFilter: true
forceSTSHeader: true
stsIncludeSubdomains: true
stsSeconds: 15552000
customFrameOptionsValue: SAMEORIGIN
customRequestHeaders:
X-Forwarded-Proto: https
secured:
chain:
middlewares:
- default-headers
traefik.yml
api:
dashboard: true
debug: true
entryPoints:
http:
address: ":80"
http:
redirections:
entryPoint:
to: https
scheme: https
https:
address: ":443"
serversTransport:
insecureSkipVerify: true
providers:
docker:
endpoint: "unix:///var/run/docker.sock"
exposedByDefault: false
file:
filename: /config.yml
watch: true
certificatesResolvers:
cloudflare:
acme:
email: name@god.com
storage: acme.json
dnsChallenge:
provider: cloudflare
#disablePropagationCheck: true # uncomment this if you have issues pulling certificates through cloudflare, By setting this flag to true disables the need to wait for the propagation of the TXT record to all authoritative name servers.
resolvers:
- "1.1.1.1:53"
- "1.0.0.1:53"
why i cannot connect to the NAS ?
Before traefik i used Nginx Proxy Manager and everything works fine.
