I have a rocketchat service
rocketchat:
labels:
- traefik.enable=false
image: rocketchat/rocket.chat:latest
environment:
- PORT=3000
- ROOT_URL=https://nudibranch.com/chat
networks:
- traefik
I have a nginx container in front of it, behind traefik:
nginx:
image: nginx:alpine
networks:
- traefik
labels:
- traefik.docker.network=traefik
- "traefik.tcp.routers.nginx.rule=HostSNI(nudibranch.com)"
- "traefik.tcp.routers.nginx.service=nginx"
- "traefik.tcp.routers.nginx.tls.passthrough=true"
- "traefik.tcp.services.nginx.loadbalancer.server.port=443"
I configure nginx to pass traffiic to rocketchat at https://nudibranch.com/chat:
cert.pem is a cloudflare cert + cloudflare intermediate bundle. key.pem is cloudflare cert key.
upstream backend {
server rocketchat:3000;
}
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
ssl_certificate /certs/cert.pem;
ssl_certificate_key /certs/key.pem;
server_name nudibranch.com;location /chat {
proxy_pass http://backend;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_set_header X-Nginx-Proxy true;
proxy_redirect off;
}
}
nudibranch.com is behind Cloudflare
so this all works... I successfully reach the rocketchat service from external at https://nudibranch.com/chat
how can I do this just with traefik ?
I try to configure traefk only with labels in docker-compose.yml