====== Traefik ======

Reverse Proxy mit automatischer TLS-Terminierung.

===== Details =====

^ Key ^ Value ^
| Container | CT 102 |
| IP | 10.100.161.102 |
| Ports | 80, 443 |
| RAM | 512 MB |

===== Features =====

  * Let's Encrypt Wildcard-Zertifikat (*.home.miskam.xyz)
  * DNS Challenge via Cloudflare
  * Automatische HTTP→HTTPS Redirect
  * Dynamic Configuration (File Provider)

===== Konfiguration =====

<code>
/etc/traefik/
├── traefik.yml          # Static config
├── acme.json            # Let's Encrypt certs
└── dynamic/
    └── services.yml     # Service routes
</code>

===== Routes =====

^ Host ^ Backend ^
| n8n.home.miskam.xyz | 10.100.161.111:5678 |
| vault.home.miskam.xyz | 10.100.161.112:8080 |
| wiki.home.miskam.xyz | 10.100.161.113:80 |
| status.home.miskam.xyz | 10.100.161.114:3001 |
| monitoring.home.miskam.xyz | 10.100.161.115:3000 |
| git.home.miskam.xyz | 10.100.161.116:3000 |

===== Logs =====

<code bash>
journalctl -u traefik -f
</code>

===== Ansible =====

<code bash>
ansible-playbook site.yml --limit traefik
</code>

===== Links =====

  * [[https://doc.traefik.io/traefik/|Traefik Docs]]
  * [[infrastructure:tls-certificates|TLS Setup]]