traefik

Best Practices

• Define entryPoints for HTTP and HTTPS with appropriate ports
• Configure automatic HTTPS with Let's Encrypt via certificatesResolvers
• Use middleware chains for authentication, rate limiting, and headers
• Enable access logging and metrics for observability
• Use Docker or Kubernetes provider for automatic service discovery
• Configure health checks for backend services
• Set timeouts for read, write, and idle connections
• Always redirect HTTP to HTTPS in production
• Use Let's Encrypt for automatic TLS certificates
• Do not expose the dashboard without authentication
• Set exposedByDefault to false for Docker provider
• Configure access logging for audit and debugging

Documentation Sources