Nginx Proxy Manager VS traefik

[Nginx Proxy Manager](https://nginxproxymanager.com/) is a containerized Nginx server with a web UI, built-in Let's Encrypt and TLS Cert management, some rudimentary access control features, and some other stuff.

you could take a look at nginx proxy manager and use something like "nextcloud.example.com", "jellyfin.example.com"

Have a look at https://nginxproxymanager.com/ as an easy start.

The link for the Github Page is here: https://github.com/pawelmalak/flameMy Applications:About Me: An about me page, well, about me (duh)Cockpit: A server monitoring tool (https://cockpit-project.org)Pi-Hole: An DNS-based adblocking monster (https://pi-hole.net)Wireguard: Home VPN with a Web GUI (https://github.com/WeeJeWel/wg-easy)Nextcloud: A place to store my files (https://nextcloud.com)Rocket Chat: The way I use to talk to international friends (imagine having those) (https://rocket.chat)Portainer: A way to monitor all my 29 RAM-eating dockers (https://www.portainer.io)Aria2Admin: A download manager with a Web GUI (https://hub.docker.com/r/beginor/aria2)Privatebin: Pastebin, but more private (Ya see what I did there? Its bad? Oh.) (https://privatebin.info)Code Server: VS-Code, but in a browser (https://github.com/cdr/code-server)PhoneInfoGA: Lookup any phone number (because scammers made me) (https://github.com/sundowndev/phoneinfoga)NGINX: Reverse Proxy Manager with a Web GUI (https://nginxproxymanager.com)Librespeed: Speedtest.net without the ADs (https://librespeed.org)Shlink: A link shortener (https://shlink.io)AMP: 1.17 Paper Minecraft Server Control Panel with a Web GUI (https://cubecoders.com/AMP)Whoogle: A self-hosted search engine (IT REALLY GIVES THE SAME EXACT RESULTS THAT GOOGLE GIVES, LIKE IN ORDER) (https://github.com/benbusby/whoogle-search)Plex: A way to view my totally not pirated movies (totally, who would dare to pirate) (https://www.plex.tv)Tautulli: Way to manage plex (https://tautulli.com)Metube: Youtube-DL with a Web GUI (https://github.com/alexta69/metube)Homebridge: A way to add way more smart devices to the Apple Home app (https://homebridge.io)CUPS: A print server (who needs a new wireless printer, when you can make your own?) (https://www.cups.org)Vaultwarden: My life saver who has been then from the beginning, ahem, I mean a password manager (https://github.com/dani-garcia/vaultwarden)Uptime Kuma: A way to check if any of my services go down (and a way to get mass pinged at 12AM, since I update all my dockers at 12AM) (https://github.com/louislam/uptime-kuma)Router: Totally not my router page (I hate FiOS too, dw) (https://www.verizon.com/home/fios/)

I've been using Nginx Proxy manager for a while now and am loving it. https://nginxproxymanager.com/

been going through the same thing. I ended up going with https://github.com/jc21/nginx-proxy-manager as it gives a nice noob friendly interface.

this will be your new friend https://nginxproxymanager.com/

K3s comes by default with traefik as the ingress controller. I heard great things about it, but I prefer to use ingress-nginx. This is simply because I'm more familiar with it. You can choose pretty much any ingress controller you want for Kubernetes, so pick one according to your own preferences.

I got some of the way down the rabbithole of implementing Traefik in my homelab before realizing that how I’ve built my lab and some of my services might not be a good fit for Traefik. I started with it on a tip from a coworker, but his use case is a little different than mine - specifically that I already have some robust Ansible roles built for the services I run, and I prefer config management in Ansible than in Docker Compose files.

> As a relatively young dev, the idea of a "web server" as a standalone binary that serves your application (vs a library that you use to write your own "server") feels strange.

In my eyes, the ideal setup is one that's layered: where you have an ingress that's basically a load balancer that also ensures that you have SSL/TLS certificates, enforces rate limits, perhaps is used for some very basic logging, or can optionally do any URL rewriting that you need. Personally, i think that Caddy (https://caddyserver.com/) is lovely for this, whereas some people prefer something like Traefik (https://traefik.io/), though the older software packages like Nginx (https://nginx.org/en/) or even Apache (https://www.apache.org/) are good too, as long as the pattern itself is in place.

Then, you may additionally have any sorts of middleware that you need, such as a service mesh for service discovery, or providing internal SSL/TLS - personally Docker Swarm (https://docs.docker.com/engine/swarm/) overlay networks have always been enough for me in this regard, though some people enjoy other solutions, such as Hashicorp Consul (https://www.consul.io/), or maybe something intended for Kubernetes or other platforms that you already may be using, like Linkerd (https://linkerd.io/).

Finally, you have your actual application with its server. Personally, i think that the web server should be embedded (for example, embedded Tomcat with Spring Boot) or indeed just be a library that's a part of the application executable, as long as you can update it easily enough by rebuilding the application - containers are good for this, but aren't strictly necessary, since sometimes other forms of automation and packaging are also enough.

The reason why i believe this, is because i've seen plenty of deployments where that just isn't the case:

  - attempts to store certificates within the application, each application server having different requirements for the formats to be used, making management (and automation) of renewal a total nightmare

I haven't used this: https://github.com/traefik/traefik You could look at replacing nginx proxy manager with traefik

e.g https://traefik.io/ or https://hub.docker.com/r/jwilder/nginx-proxy

Traefik Labs keeps on doing giant leaps and integrating Consul Connect is another step beyond for Traefik Proxy. This indicates the path of this product is humble but reliable and flexible, with an open-minded philosophy behind that is never scared of comparing and collaborating with other important competitors and actors in the CNCF big landscape picture.

I will assume that you have docker and docker-compose installed. If you need more info on Traefik you can have a look at their website, but I have also written a post on setting up Traefik v2 in detail, but we will touch on that in this post.

Take a look at https://github.com/traefik/traefik/issues/6485 for how to use traefik for redis over swarm clusters.

Run web services behind a proxy. For containers, Traefik is popular. I use the SWAG container created by the linuxserver.io folks. It has NGINX for reverse proxy, Letsencrypt integration to help you get a valid certificate, and has fail2ban integration.