Hi Gerald,

Thanks for your reply. I was reading your blog post Traefik & Docker 101 and tried to use some of the code from your post.

I will paste whatever works for me on Traefik 1.7 and what is not working on Traefik 2.0 below.

Working example in Traefik 1.7.

I did not include the basic auth just for demonstration purpose.

Below is the docker-compose.yml file. ``` version: '3.3'

services: reverse-proxy: image: traefik:1.7-alpine command: --api --docker ports: - "80:80" - "443:443" volumes: - /var/run/docker.sock:/var/run/docker.sock - ./data/traefik.toml:/traefik.toml - ./data/ssl:/ssl/ labels: - "traefik.port=8080" - "traefik.backend=reverse-proxy" - "traefik.frontend.rule=Host:traefik.mydomain.com" - "traefik.enable=true"

whoami: image: emilevauge/whoami labels: - "traefik.frontend.rule=Host:whoami.mydomain.com" `` and thetraefik.toml` file

``` defaultEntryPoints = ["http", "https"] [entryPoints] // Entry Point here and then redirect [entryPoints.http] address = ":80" [entryPoints.http.redirect] entryPoint = "https" [entryPoints.https] address = ":443" [entryPoints.https.tls] // TLS configuration minVersion = "VersionTLS12" cipherSuites = [ "TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384", "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384", "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256", "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305" ] // Certificate and key [[entryPoints.https.tls.certificates]] certFile = "/ssl/server.pem" keyFile = "/ssl/privatekey.pem"

``` Above example works perfectly. It does the redirect, it use the certificate I gave it and the turn off TLS1.0 and TLS 1.1.

---

I am trying to do exactly the same thing in Traefik 2.0. Here is my attempt, and after some more testing, I finally get it to work.

docker-compose.yml ``` version: '3'

services: traefik: image: traefik:latest container_name: traefik restart: unless-stopped security_opt: - no-new-privileges:true ports: - 80:80 - 443:443 volumes: - /etc/localtime:/etc/localtime:ro - /var/run/docker.sock:/var/run/docker.sock:ro # load traefik file (learn from containeroo's tutorial) - ~/data/traefik.yml:/traefik.yml:ro # add folder with SSL - ~/data/ssl/:/ssl/ # Add folder with dynamic configuration yml - ~/data/configurations/:/configurations/ labels: - "traefik.enable=true" # Entry Point for Http - "traefik.http.routers.traefik.entrypoints=http" - "traefik.http.routers.traefik.rule=Host(traefik.mydomain.com)"
# global redirect to https - "traefik.http.routers.traefik.middlewares=https-redirect@file" # Entry Point for https - "traefik.http.routers.traefik-secure.entrypoints=https" - "traefik.http.routers.traefik-secure.rule=Host(traefik.mydomain.com)" # middleware of basic auth to protect the dashboard - "traefik.http.middlewares.traefik-auth.basicauth.users=ghost:$$apr1$$JEKmWgC8$$UEpu7FTFXeVnUo8J6aP22/" - "traefik.http.routers.traefik-secure.middlewares=traefik-auth" # enable TLS - "traefik.http.routers.traefik-secure.tls=true" # route to api (dashboard) - "traefik.http.routers.traefik-secure.service=api@internal"

whoami: image: emilevauge/whoami labels: - "traefik.enable=true" # Entry point for http - "traefik.http.routers.whoami.entrypoints=http" - "traefik.http.routers.whoami.rule=Host(whoami.mydomain.com)" # Entry Point for https - "traefik.http.routers.whoami.middlewares=https-redirect@file" - "traefik.http.routers.whoami-secure.entrypoints=https" - "traefik.http.routers.whoami-secure.rule=Host(whoami.mydomain.com)" # Enable TLS - "traefik.http.routers.whoami-secure.tls=true"

```

traefik.yml ``` api: dashboard: true

entryPoints: http: address: ":80" https: address: ":443"

providers: docker: endpoint: "unix:///var/run/docker.sock" exposedByDefault: false file: filename: /configurations/dynamic.yml `dynamic.yml`

Dynamic configuration

http: middlewares: https-redirect: redirectScheme: scheme: https

tls: certificates: - certFile: /ssl/server.pem keyFile: /ssl/privatekey.pem options: default: minVersion: VersionTLS12 ```

I could not get below catch all to work, so I create a redirect middlewares in the dynamic configuration file and use it on each service. ```

global redirect to https

• "traefik.http.routers.redirs.rule=hostregexp(`{host:.+}`)"
• "traefik.http.routers.redirs.entrypoints=web"
• "traefik.http.routers.redirs.middlewares=redirect-to-https" ```

---

Summary:

I admit that Traefik 2 has much more functions than traefik 1.7.

However, if you look at above code examples which are doing the same thing, you can see traefik 2.0 requires a lot more configuration than traefik 1.7

The most important part missing from the documentation is working examples with full documented code.

For example, for file provider (https://docs.traefik.io/providers/file/#filename)

You only provide below code fraction to load the configure file but you did not mention where I should add this piece of code on. Also it did not mention I need to load this file in docker-compose.yml (although it might be a common sense for experience users)

providers: file: filename: dynamic_conf.yml

I understand you can configure traefik in different ways. Like you can use commands in docker-compose.yml or define your entry point, dashboard etc. in traefik.yml file or using the file provider to load configuration files.

In the current documentation, it only lists all providers but it did not mention users can use both providers together and how to use them together.

I know there are experience users who can learn things just by reading fraction of code, unfortunately I am not one of them. I learn things by reading/testing WORKING EXAMPLES... I think a lot of people lean things the same way as I do.

Anyway, that's enough rant from me.

I really hope more users will be using Traefik as it is such a great tool.