Example

Use Traefik as a reverse-proxy in conjunction with svn-docker. The example handles the following domains:

• https://localhost
• http://insecure.localhost Port 80
• https://secure.localhost Port 443 with SSL
• http[s]://svn.localhost automatic https redirection

Note: You may require a local DNS / patch of /etc/hosts to get the subdomains working.

Create certificate

This example uses mkcert to generate wildcard certificate for *.localhost. For private use you may use this approach to create a certificate for your local router environment e.g. *.host.localdomain

$ wget -O mkcert https://dl.filippo.io/mkcert/latest?for=linux/amd64
$ chmod +x mkcert
$ mkdir certs
$ ./mkcert -cert-file certs/_wildcard.localhost.pem -key-file certs/_wildcard.localhost-key.pem "*.localhost" localhost 127.0.0.1 ::1

the output might look as follows

Created a new local CA
Note: the local CA is not installed in the system trust store.
Note: the local CA is not installed in the Firefox and/or Chrome/Chromium trust store.
Run "mkcert -install" for certificates to be trusted automatically

Created a new certificate valid for the following names
 - "*.localhost"
   Warning: many browsers don't support second-level wildcards like "*.localhost"
 - "localhost"
 - "127.0.0.1"
 - "::1"

Reminder: X.509 wildcards only go one level deep, so this won't match a.b.localhost

The certificate is at "certs/_wildcard.localhost.pem" and the key at "certs/_wildcard.localhost-key.pem"

It will expire on ...

You may run ./mkcert -CAROOT to see where the RootCA is stored e.g. to move it to other devices. For more information check the mkcert project page.

The generated files are used by providers/tls.yml.

Startup

$ docker network create traefik_default
$ docker compose up