enable traefik dashboard

ls1intum · Feb 4, 2025 · 3e3afb7 · 3e3afb7
1 parent 39d5dfc
commit 3e3afb7
Showing 1 changed file with 13 additions and 7 deletions.
diff --git a/docker/compose.proxy.yaml b/docker/compose.proxy.yaml
@@ -11,6 +11,8 @@ services:
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock:ro
       - ./letsencrypt:/letsencrypt
+    environment:
+      - TRAEFIK_BASIC_AUTH=${TRAEFIK_BASIC_AUTH} # `htpasswd -nb <user> <password>` to generate
     command:
       - "--ping=true"
       - "--ping.entrypoint=http"
@@ -29,13 +31,17 @@ services:
       - "--certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=http"
       - "--providers.docker=true"
     labels:
-      - traefik.enable=true
-      - traefik.http.routers.traefik.entrypoints=http
-      - traefik.http.routers.traefik.service=api@internal
-      - traefik.http.services.traefik.loadbalancer.server.port=8080
-      - traefik.http.middlewares.errorpage.errors.status=501,502,503,504
-      - traefik.http.middlewares.errorpage.errors.service=maintenance
-      - traefik.http.middlewares.errorpage.errors.query=/index.html
+      - "traefik.enable=true"
+      - "traefik.http.routers.traefik.entrypoints=https"
+      - "traefik.http.routers.traefik.service=api@internal"
+      - "traefik.http.routers.traefik.rule=Host(`${APP_HOSTNAME}`) && PathPrefix(`/traefik`)"
+      - "traefik.http.routers.traefik.tls=true"
+      - "traefik.http.routers.traefik.middlewares=auth"
+      - "traefik.http.middlewares.auth.basicauth.users=${TRAEFIK_BASIC_AUTH}"
+      - "traefik.http.services.traefik.loadbalancer.server.port=8080"
+      - "traefik.http.middlewares.errorpage.errors.status=501,502,503,504"
+      - "traefik.http.middlewares.errorpage.errors.service=maintenance"
+      - "traefik.http.middlewares.errorpage.errors.query=/index.html"
     healthcheck:
       test: 'wget -qO- http://localhost:80/ping || exit 1'
       interval: 4s