Running Dashboard on port 8443 and Configuring SSL

Traefik Traefik v3 (latest)
1

I am trying to run Traefik's dashboard on port 8443 and its docker-compose.yml file contain:

  traefik:
    container_name: traefik
    # The official v3 Traefik docker image 
    image: traefik:v3.3 
    # Enables the web UI and tells Traefik to listen to docker 
    ports:       
       - "80:80"
       - "443:443"
       - "8080:8080"
       - "8443:8443"

    command: 
      -  --api.insecure=false
      -  --providers.docker
      -  --providers.file.directory=/etc/traefik/dynamic

    labels:
      - traefik.enable=true
      - traefik.http.routers.traefik.entryPoints=web8443
      - traefik.http.services.traefik.loadbalancer.server.port=443
      - "traefik.http.routers.traefik.rule=Host(`${RC_TRAEFIK_HOSTNAME}`)"

    volumes: 
      # So that Traefik can listen to the Docker events 
      - /var/run/docker.sock:/var/run/docker.sock     
      # Mount the dynamic configuration      
      - ./certs/certs-traefik.yaml:/etc/traefik/dynamic/certs-traefik.yaml
      - ./certs:/etc/certs 
      - ./traefik.yaml:/etc/traefik/traefik.yaml
    networks:
      - traefik-redcap-net
     

    
networks:
  traefik-redcap-net:
    external: true
    name: traefik-redcap-net

Where the content of traefik.yaml is:

## Static configuration
entryPoints:
  web80:
    address: ":80"

  web8080:
    address: ":8080"

  web443:
    address: ":443"

  web8443:
    address: ":8443"    

providers:
  file:
    filename: /etc/traefik/dynamic/certs-traefik.yaml

and /etc/traefik/dynamic/certs-traefik.yaml is:

tls:
  certificates:
    - certFile: /etc/certs/ssl.crt
      keyFile:  /etc/certs/ssl.key

When opening the website for the dashboard I get: 404 page not found

Also, I do not understand this result and why it is being opened a non secure ssl warning. Maybe the CA cert is also needed but if so how can I specify it?

I opened the 8443 port also:

8443/tcp                   ALLOW       Anywhere

Thanks in advance

2

You can’t use traefik.yml and command: at the same time for static config, decide for one (doc).

For a working setup, compare to simple Traefik example.

3

For the Traefik example you mentioned... I need to ask two questions:

a) How using commands valid ssl certificates can be specified? My university provides those certificates and CA file.
b) How using commands I can set traefik to listen to "external" secured port 8443 and redirect to traefik's internal 443? I want to reserve "external" 443 for another service.

Thanks

4

For existing TLS certs, you need to load them in a dynamic config file (doc), which is loaded via providers.file in static config.

Then you simply need to enable TLS on entrypoint or router with .tls=true or tls: {}.

For using a different port externally, you should set that up with ports: in Docker compose.yml.

5

I tried to follow all your suggestions and posted another question at:

Thanks

6

Answered already to you :slight_smile: