Install Trafik As Reverse Proxy

Traefik 介绍

Traefik 是一款服务反向代理网关, 可从多种不同的基础设施架构中读取服务信息并完成请求转发

Traefik 将服务注册信息提供者定义为 Provider, 以下为 Traefik 当前支持的 Provider

• Docker
• Kubernetes IngressRoute
• Kubernetes Ingress
• Kubernetes Gateway API
• Consul Catalog
• Nomad
• ECS
• File
• Consul
• Etcd
• ZooKeeper
• Redis
• HTTP

Docker 安装 Traefik

使用 docker-compose 安装 Traefik

services:
  traefik:
    image: traefik
    container_name: traefik
    restart: unless-stopped
    network_mode: host
    command:
      - --api=true
      # - --accesslog=true
      # - --log.level=INFO
      - --providers.docker=true
      - --providers.docker.exposedbydefault=false
      - --providers.file.filename=/config/traefik.yaml
      - --providers.file.watch=true
      - --entrypoints.web.address=:80
      - --entrypoints.web.http.redirections.entrypoint.to=websecure
      - --entrypoints.web.http.redirections.entrypoint.scheme=https
      - --entrypoints.websecure.address=:443
      - --entrypoints.websecure.http.tls=true
      - --entrypoints.websecure.http.tls.certresolver=dnspod
      - --certificatesresolvers.dnspod.acme.dnschallenge=true
      - --certificatesresolvers.dnspod.acme.dnschallenge.provider=dnspod
      - --certificatesresolvers.dnspod.acme.email=xxx@gmail.com
      - --certificatesresolvers.dnspod.acme.storage=/letsencrypt/acme.json
    environment:
      - DNSPOD_API_KEY=***************
    volumes:
      - ./config:/config
      - ./letsencrypt:/letsencrypt
      - /var/run/docker.sock:/var/run/docker.sock

命令行参数说明

其他启动配置可以参考官方 CLI Reference

环境变量

其他 DNS Providers

Traefik 配置使用

Docker Provider

Traefik 可以读取服务在 labels 中的内容, 以下为一个实例

services:
  blog:

    # ...

    labels:
      - traefik.enable=true
      - traefik.http.services.blog.loadbalancer.server.port=80
      - traefik.http.middlewares.redirect-to-www.redirectregex.regex=^https://xilin.icu/(.*)
      - traefik.http.middlewares.redirect-to-www.redirectregex.replacement=https://www.xilin.icu/$${1}
      - traefik.http.routers.blog.rule=Host(`xilin.icu`)||Host(`www.xilin.icu`)
      - traefik.http.routers.blog.entrypoints=websecure
      - traefik.http.routers.blog.service=blog
      - traefik.http.routers.blog.tls.certresolver=dnspod
      - traefik.http.routers.blog.middlewares=redirect-to-www

标签说明

File Provider

通过 --providers.file.filename 指定了 File Provider 的路径, 因此可以通过配置文件增加对非 docker 服务的代理支持

http:
  middlewares:
    basic-auth:
      basicAuth:
        users:
          - xxl:$apr1$Jk5NhCQT$4IMBP5aRjjacrKXBVvy.c0

  routers:
    dashboard:
      entryPoints:
        - websecure
      middlewares:
        - basic-auth
      rule: Host(`traefik.xilin.icu`)
      tls:
        certResolver: dnspod
      service: api@internal

    zero:
      entryPoints:
        - websecure
      rule: Host(`zero.xilin.icu`)||HostRegexp(`^.+\.zero\.xilin\.icu$`)
      tls:
        certResolver: dnspod
        domains:
          - main: "zero.xilin.icu"
            sans:
              - "*.zero.xilin.icu"
      service: zero

  zero:
      loadBalancer:
        servers:
          - url: http://zero.lan:80

其他配置可参考官方实例