Get the latest tech news

Take a look at Traefik, even if you don't use containers

Published on: 2024-04-30 Traefik got really popular over the last few years in the bubble of home-lab youtubers, that’s when I first heard about it. Traefik is more comparable to HAProxy than to nginx/caddy/apache2 - it forwards requests to services and returns the responses, can even modify headers and other aspects of the request and response, but it can’t serve files.

If you didn’t understand the terms I used earlier (certificate provider, entrypoint, routers, services & middlewares), the documentation will help you in sub-10 minutes. As an addition, HAProxys PROXY protocol is a more secure way of transmitting the info that gets lost due to the user first reaching the proxy - in the past, you would’ve used the “X-Forwarded-<…>” headers, but I always disliked those, as making them secure isn’t trivial and requires testing, as header handling often times isn’t well documented. On NGINX, I use the great Vouch Proxy(also a Golang one-binary program :>) to secure certain services with Azure AD (sorry, Microsoft Entra…) Authentication.

Get the Android app