Nginx Proxy Manager VS traefik

Nginx Proxy Manager — self-hosted reverse proxy with SSL built-in

Nginx Proxy Manager: if you want that dashboard life with SSL and subdomain routing.

NGINX Proxy Manager - GUI for NGINX proxy management

I've been running a tor relay relay on my static IP at my home for over a year now and haven't seen any trouble from it.

On the other hand, Nginx Proxy Manager got me blocked by brightcloud for the dumbest reason imaginable - the word "proxy" on the default "it works" page - https://github.com/NginxProxyManager/nginx-proxy-manager/dis...

I began to self-host a Minecraft server using Crafty Controller, an Excalidraw instance, Docmost to replace Notion, Plane to replace Jira, and Penpot to replace Figma. To be able to access them from the internet, I used Nginx Proxy Manager to set up reverse proxies with SSL. You can use Traefik or Caddy instead, but I enjoyed the ease-of-use of NPM. For a dashboard solution, I started with Homarr, but later switched to Homepage because I'm apparently incapable of making a decision and sticking with it.

In our case, since we use proxymanager to manage the different domains, the entry of this configuration is done in the advanced section

If anyone is looking for one, https://nginxproxymanager.com/

Been using it for years and it’s been solid.

Most people will use nginx-proxy [0] or Traefik [1] for front ending home labs with LetsEncrypt certs... Beyond that people will protect them with things like Tailscale [2], Cloudflare Tunnels [3] or even just mTLS [4] for protected access.

Home labbing today has a lot of amazing software and it's hard to keep up!

And as for dashboarding [5] on top of all this there are a lot of options.

[0] https://nginxproxymanager.com/

https://github.com/NginxProxyManager/nginx-proxy-manager/iss...

Hetzner, Docker, Traefik as proxy and Apache / httpd inside the containers

With some more work, you could configure proxies that work lower on the infrastructure level, like NGINX, Envoy Proxy, HAProxy, or Traefik Proxy to give you the classic API gateway functionality. There's also KrakenD as another open-source option.

Traefik - Modern reverse proxy and load balancer

I wanted to try another one on Kubernetes. I chose Traefik because my searches mentioned it was the easiest to use in Kubernetes. As I mentioned, Traefik provides a Helm Chart, which makes it easy to install. Additionally, it integrates with OpenTelemetry.

Another problem is that the default certificates issued by Traefik, are not trusted by other systems or browsers. So we frequently need to bypass security warnings, which by itself is indicative of a problem and encourages bad habits. Furthermore, even if we manage to configure our setup to use the ingress service from within the cluster, it depends on the backend application if it allows bypassing TLS host checking.

Sidecar containers: Google Cloud Run has a cool feature where you can run multiple containers next to each other. So for example, if you want to run Caddy or Traefik as a reverse proxy for your ingress container and then have both your web frontend container & backend api container co-located in the same service, you can do that & have everything be super low latency.

traefik: link --> re-uses go/http: 1MB for headers

The main goal of this guide is to establish a streamlined process for deploying web applications with minimal effort. Using Amazon EC2 with Docker and Traefik as a reverse proxy, we will create a flexible server environment that supports multiple web applications and services, including databases like PostgreSQL, on different ports. This setup will ensure smooth deployment workflows, easy vertical scaling, and adaptable management of routing for various services, allowing for efficient expansion and integration of additional components as needed.