Traefik

https://docs.traefik.io

• Maintainer: @p4u1, @decentral1se, @javielico
• Status: stable
• Category: Utilities
• Features: ?
• Image: traefik, 4, upstream
• Healthcheck: Yes
• Backups: No
• Email: N/A
• Tests: 2
• SSO: ? (Keycloak)

Basic usage

1. Set up Docker Swarm and abra
2. abra app new traefik
3. abra app config YOURAPPDOMAIN - be sure to change DOMAIN to something that resolves to your Docker swarm box
4. abra app deploy YOURAPPDOMAIN

Configuring basic auth

1. Create the usersfile locally: htpasswd -c usersfile <username>
2. Uncomment the Basic Auth section in your .env file
3. Insert the secret: `abra app secret insert usersfile v1 -f usersfile
4. Redploy your app: abra app deploy -f <domain>

Configuring wildcard SSL using DNS

Automatic certificate generation will Just Work™ for most recipes which use a fixed number of subdomains. For some recipes which need to work across arbitrary subdomains, like federatedwiki and go-ssb-room, you'll need to give Traefik access to your DNS provider so that it can carry out Letsencrypt DNS challenges.

1. Use Gandi or OVH for DNS 🤡 (support for other providers can be easily added, see the lego docs.
2. Run abra app config YOURAPPDOMAIN
3. Uncomment e.g. ENABLE_GANDI and the related SECRET_.._VERSION line, e.g. SECRET_GANDIV5_API_KEY_VERSION
4. Generate an API key for your provider
5. Run abra app secret insert YOURAPPDOMAIN SECRETNAME v1 SECRETVALUE, where SECRETNAME is from the compose file (e.g. compose.gandi-api-key.yml) e.g. gandiv5_api_key and SECRETVALUE is the API key.
   • For Gandi, you can use either the deprecated API Key or a GandiV5 Personal Access Token, in which case use compose.gandi-personal-access-token.yml.
6. Redeploy Traefik, using e.g. abra app deploy YOURAPPDOMAIN -f

Blocking scrapers with Anubis

Uncomment the lines on the Anubis section of the configuration. Set a domain name for the cookies and a domain that will serve Anubis redirection service. Optionally and for added security, set a list of the domain names for the apps that are going to be protected.

After deploying these changes, go to each recipe that supports Anubis and follow the process there. Enabling Anubis here is not enough for protection your apps.