Skip to main content

Traefik

Traefik is the edge router for selected services in the VPS stack. It handles TLS, Docker-label routing, and dashboard/API access where enabled.

Operating Notes​

  • Keep dashboard access protected.
  • Use Cloudflare DNS challenge configuration for certificates where configured.
  • Avoid defining two routers for the same Host() unless intentionally replacing an old route.
  • Treat router labels as operational topology and keep them in internal documentation.

Docs Apps Routing Direction​

  • Host(\docs.devman.me`)` should route to the public Starlight docs app.
  • Host(\ops.devman.me`)` should route to the Docusaurus ops app only when Cloudflare Access or equivalent protection is active.

Related runbook: Cloudflare 525 / Traefik.