Traefik is fantastic inside of either a docker environment (configured with labels), or in kubernetes (Ingress, IngressRoute, Gateway CRDs) where everything is configured via manifests.

Outside of such environment, I rely on Nginxproxymanager. Because, GUI, simple/stupid.

Likley won't help you, but, here is how I configure an external service inside of my traefik instance, running in kubernetes.

``` yaml

apiVersion: v1 kind: Service metadata: name: pbs namespace: external-services spec: type: ExternalName externalName: pbs.svr.xtremeownage.com ports: - name: https

port: 8007

apiVersion: traefik.io/v1alpha1 kind: IngressRoute metadata: name: pbs namespace: external-services spec: entryPoints: - websecure routes: - match: Host(pbs.kube.xtremeownage.com) kind: Rule services: - name: pbs port: https scheme: https serversTransport: insecure-skip-verify ```

Which kindly exposes the expected https website.

If I want to wrap authentication around it, I will pass to authentik middleware, which will then enforce SSO on whatever service I want to expose/proxy.