TOWERBY CETMIX
← Hangar / jet_template_traefik_docker

Traefik 3 Docker Reverse Proxy with Let's Encrypt

Deploy a Traefik Jet that routes Docker services over HTTPS and manages Let's Encrypt certificates.

↓ Download↓ 0 downloads

Summary

Category
Jet Templates
Tags
Web
Authors
Cetmix OÜ
License
AGPL-3
Version
1.0.0
Call sign
jet_template_traefik_docker

This snippet imports a Traefik Docker Jet Template using traefik:3 by default. It publishes TCP 80 and 443, redirects HTTP to HTTPS and watches Docker labels and dynamic configuration files. Docker services opt in through labels and use the shared Tower Docker network. The Build plan renders the static configuration and shared middleware, mounts the Docker socket read-only and stores ACME certificates under the configured Traefik directory. Docker, Fail2ban and Tower Core dependency templates are included.

Configure and launch

  1. Import the YAML and install the Traefik template on the target server. Set instance_certbot_email to a valid email address, make ports 80 and 443 available, and point service DNS records at the host.
  2. Choose traefik_acme_mode. The default file mode uses HTTP-01 on port 80. DNS challenge modes use the corresponding Tower secrets.
    • Cloudflare (cloudflare) uses cloudflare_token.
    • DigitalOcean (do) uses digitalocean_api_token.
    • Route 53 (aws) uses aws_dns_key_id and aws_dns_access_key.
    • Hetzner (hetzner) uses hetzner_api_token.
  3. Create a Jet targeting Running. Configure downstream Docker services to opt in with Traefik labels and join the same Docker network.

Operate

Use the Jet's Traefik Logs to diagnose certificate issuance or routing. Check DNS, reachability, router labels and the Docker network if HTTPS fails. Rebuild recreates the stopped container using its existing configuration files. Use the configuration templates to render static or middleware changes. Remove removes the container and Destroy removes its files, including local ACME storage when it is under the Jet root.