Traefik Reverse Proxy on an Anubiz Offshore VPS
Traefik is the Docker-native reverse proxy. It auto-discovers containers via labels and provisions TLS through Let's Encrypt without a config file per app. On an Anubiz VPS running many containerized apps, Traefik is the cleanest option. This guide is the production setup: persistent acme.json, dashboard behind basic auth, middleware chain for rate limit and headers, and how to mount it so it survives Docker restarts.
Need this done for your project?
We implement, you ship. Async, documented, done in days.
Step 1: docker-compose for Traefik
Service traefik:3.x, mount /var/run/docker.sock read-only, mount acme.json with mode 600, expose 80 and 443.
Step 2: Static Config
traefik.yml: entryPoints web (80) and websecure (443). certificatesResolvers le with HTTP challenge. providers docker with exposedByDefault false.
Step 3: Per-App Labels
Each app container gets labels: traefik.enable=true, traefik.http.routers.app.rule=Host(\`app.example.com\`), traefik.http.routers.app.tls.certresolver=le.
Step 4: Dashboard
Expose dashboard on a subdomain with basic auth middleware. Never on plain 8080.
Step 5: Middleware
Rate limit middleware applied to public routes. Headers middleware for HSTS and the usual set.
Related Services
Why Anubiz Host
Ready to get started?
Skip the research. Tell us what you need, and we'll scope it, implement it, and hand it back — fully documented and production-ready.