Traefik
An open-source, cloud-native reverse proxy and load balancer that supports automatic service discovery and dynamic configuration. It natively integrates with observability standards such as OpenTelemetry and Prometheus, making it well-suited for containerized and microservices environments.
Timeline (last 90 days)
The lab's deployment pipeline uses Forgejo for code hosting, Komodo reads and deploys containers, and Docker labels drive Traefik to complete reverse proxying and service exposure, forming a GitOps-style workflow.
Before native OIDC support, the ways to secure GoCron were relatively limited, mainly including running it locally only, disabling port publishing, or relying on proxy authentication solutions such as TinyAuth and Traefik's OIDC plugin.
Both RSA and ECC dual certificates can be configured simultaneously at the reverse proxy layer (e.g., Nginx, Traefik, Caddy), with automatic negotiation during the TLS handshake.
Traefik provides tracing and metrics capabilities via OpenTelemetry, and can natively export request routing data in OTEL format.
When the same raw data is used by multiple systems to independently generate metrics, numerical discrepancies arise due to differing calculation methodologies, causing confusion during troubleshooting.
For securely accessing home services from the public internet, reverse proxies (such as Nginx Proxy Manager or Traefik) can be used in conjunction with intranet tunneling or VPNs (such as Tailscale).
Combined with a reverse proxy (Nginx Proxy Manager, Traefik, or Caddy), services can be managed uniformly, with all services sharing different subdomains of a single entry domain
Kamal (formerly MRSK) is a zero-downtime deployment tool developed by the Basecamp team, built on Docker and SSHKit, which connects to servers via SSH to pull Docker images and uses Traefik as a reverse proxy to achieve zero-downtime switching.
Well-known projects such as Traefik (reverse proxy) and Caddy (web server) are both written in Go.
All Facts (9)
The lab's deployment pipeline uses Forgejo for code hosting, Komodo reads and deploys containers, and Docker labels drive Traefik to complete reverse proxying and service exposure, forming a GitOps-style workflow.
50%UnverifiedBefore native OIDC support, the ways to secure GoCron were relatively limited, mainly including running it locally only, disabling port publishing, or relying on proxy authentication solutions such as TinyAuth and Traefik's OIDC plugin.
50%UnverifiedBoth RSA and ECC dual certificates can be configured simultaneously at the reverse proxy layer (e.g., Nginx, Traefik, Caddy), with automatic negotiation during the TLS handshake.
50%UnverifiedTraefik provides tracing and metrics capabilities via OpenTelemetry, and can natively export request routing data in OTEL format.
50%UnverifiedWhen the same raw data is used by multiple systems to independently generate metrics, numerical discrepancies arise due to differing calculation methodologies, causing confusion during troubleshooting.
50%UnverifiedFor securely accessing home services from the public internet, reverse proxies (such as Nginx Proxy Manager or Traefik) can be used in conjunction with intranet tunneling or VPNs (such as Tailscale).
50%UnverifiedCombined with a reverse proxy (Nginx Proxy Manager, Traefik, or Caddy), services can be managed uniformly, with all services sharing different subdomains of a single entry domain
50%UnverifiedKamal (formerly MRSK) is a zero-downtime deployment tool developed by the Basecamp team, built on Docker and SSHKit, which connects to servers via SSH to pull Docker images and uses Traefik as a reverse proxy to achieve zero-downtime switching.
50%UnverifiedWell-known projects such as Traefik (reverse proxy) and Caddy (web server) are both written in Go.
50%