How do I manage docker&Traefik behind a reverse proxy not on docker.

Submitted ⁨⁨5⁩ ⁨days⁩ ago⁩ by ⁨needanke@feddit.org⁩ to ⁨selfhosted@lemmy.world⁩

Fors off: I am a total beginner when it comes to docker. I do have some self hosting ecperience, but run pretty much everything in its on lxc and treat it like a full linux system.

Recently I installed immich in a container and was surprised to see how well it worked.

This lead my to finally tackle something I have been putting off for way to long; installing nightscout (a self hosten glucose monitoring&reporting utility).

For that I followed their guide. Everything worked well up untill the point where I wanted to connect to the web interface. I started of by entering my domain into the nightscout containers arguments (in the form subdomain.domain.tld). Then I used my reverse proxy (nginx, not inside docker) to forward the subdomain to the docker IP on Ports 443, then 80 and lastly the one displayed at the container when listing them with docker ps. None of those worked (I was not able to get a certificate using letsEncrypt and got a 404 when connecting without tls).

I then entered nighscout.[docker-IP] and tried to access it dkrectly which did not work either.

When googling I only find comparisons on how to set up nginx in Docker, or comparisons between the two.

source

Comments

Sort:hotnew top

JASN_DE@feddit.org ⁨5⁩ ⁨days⁩ ago
There is no need to run Traefik if you already have a working reverse proxy. Also, unless your nginx is running on non-standard ports, the ports 80 and 443 should not be available for traefik, which will prevent it from working correctly.

source
- needanke@feddit.org ⁨5⁩ ⁨days⁩ ago
  My Nginx is running in the same local network but on a different IP so there should not be acollision with the traefik ports.
  
  source
- needanke@feddit.org ⁨5⁩ ⁨days⁩ ago
  How do I connect to the container without traefik (from my local network)?
  
  When I remove all the traefic references and then run docker ps I get
  
  CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES [removed] nightscout/cgm-remote-monitor:latest "docker-entrypoint.s…" 6 seconds ago Up 5 seconds 1337/tcp nightscout [removed] mongo:4.4 "docker-entrypoint.s…" 37 hours ago Up 5 seconds 27017/tcp docker-mongo-1
  
  But I can’t reach it under dockerIP:1337.
  
  With Immich it had 0.0.0.0:port as its IP and I was able to reach it that way.
  
  source
  - CHOPSTEEQ@lemmy.ml ⁨5⁩ ⁨days⁩ ago
    Your ports are not mapped so the host system doesn’t know about them. You only have them exposed, which is for docker communication.
    
    Map your ports and then you’ll be able to access them by host-ip:mapped-port.
    
    Then you can use nginx to proxy to that.
    
    source
  - MysteriousSophon21@lemmy.world ⁨4⁩ ⁨days⁩ ago
    You need to add a ports section to your compose file like ports: - “1337:1337” - the container exposes 1337 internally but you haven’t mapped it to the host so it’s not accessible from outside the container.
    
    source
SheeEttin@lemmy.zip ⁨5⁩ ⁨days⁩ ago
Why are you using both nginx and traefik?

source
- needanke@feddit.org ⁨5⁩ ⁨days⁩ ago
  Because I don’t know how docker works, the .yaml given by nightscout is using traefik and I don’t know how to remove it without breakting the nightscout container.
  
  source
  - hedgehog@ttrpg.network ⁨5⁩ ⁨days⁩ ago
    To run it with Nginx instead of Traefik, you need to figure out what port Nightscout’s web server runs on, then expose that port, e.g.,
    
    services: nightscout: ports: - 3000:3000
    
    You can remove the labels as those are used by Traefik, as well as the Traefik service itself.
    
    Then just point Nginx to that port (e.g., 3000) on your local machine.
    
    —-
    
    Traefik has to know the port, too, but it will auto detect the port that a local Docker service is running on. It looks like your config is relying on that feature as I don’t see the label that explicitly specifies the port.
    
    source
    -> View More Comments
  - SheeEttin@lemmy.zip ⁨5⁩ ⁨days⁩ ago
    Then drop nginx and just use traefik.
    
    source
    -> View More Comments