Other Containers and Services

Adding other Containers to Traefik

If a container exists outside of this Compose project but on the same host, you can add them to Traefik so they can also have TLS/SSL

1. Add the hms-docker_proxy_net (default) network to the container along with required labels:

   services:
     mycontainer:
       image: mycontainerimage:latest
       ...
       network:
         - hms-docker_proxy_net
       labels:
         - traefik.enable=true
         - traefik.http.services.<container name>.loadbalancer.server.port=<web UI port for container>
         - traefik.http.routers.<container name>.rule=Host(`<subdomain name>.${HMSD_DOMAIN}`)
         - traefik.http.routers.<container name>.middlewares=internal-ipallowlist@file
   ...
   networks:
     - hms-docker_proxy_net
         external: true
   ...
   note

   If you changed the project_name in the hmsd_advanced.yml config file, use that project_name instead of hms-docker

2. Add DNS records (if necessary)

3. Restart the containers you just added labels to

4. Check to see if it is working correctly

Adding External Services to Traefik

You can add external services (such as services running on another host/server, like an external grafana server) to this projects Traefik config.

In inventory/group_vars/all/traefik.yml you must set traefik_ext_hosts_enabled to yes, and add the correct items to the traefik_ext_hosts_list array.

warning

All traffic between the host that runs Traefik and the target external service will be unencrypted:

Traefik will terminate the SSL connections (meaning that it will send decrypted data to the services).

Source.

You may be able to add additional Traefik configuration to configure certificates for HTTPS or bypass certificate checking, but that is outside this scope.