
Services reachable only over VPN
A service that returns 403 from outside and works normally over VPN – same name, same valid certificate. IPAllowList, …
Tag
All Serverküche tutorials tagged traefik – hands-on step-by-step self-hosting guides for your own server.
28 tutorials
In Serverküche, Traefik is the doorman in front of every application: it takes ports 80 and 443,
fetches a Let’s Encrypt certificate for each subdomain on its own and hands the request to the
right container. That way no individual application needs its own open port or its own
certificates any more. The recipes here walk through the setup – from the first compose.yaml
via routers and labels to middlewares for security headers, rate limiting and access control –
and show how the shared proxy network makes the containers reachable.

A service that returns 403 from outside and works normally over VPN – same name, same valid certificate. IPAllowList, …

Attach services to Authentik: forward auth with Traefik for apps without a login, and OpenID Connect for everything with …

Set up Authentik 2026.8 with Docker and Traefik: your own identity provider with Postgres instead of Redis – initial …

Using Traefik v3 middlewares properly: set security headers, throttle requests, protect services with BasicAuth and an …

Set up Dockge 1.5 behind Traefik: edit and deploy Compose stacks in the browser and follow the logs live – without …

Set up Audiobookshelf 2.37 with Docker and Traefik: an audiobook library with chapters, podcast subscriptions, …

Set up WordPress with Docker and MariaDB behind Traefik – with HTTPS, an isolated database and an honest update …

All your bookmarks in one place, across devices and without browser lock-in: linkding as a lean bookmark manager behind …

Stream your music collection from anywhere – no subscription, no tracking: Navidrome behind Traefik, with app support …

Merge, compress, convert PDFs and make them searchable with OCR – locally instead of on online services: Stirling-PDF …

Sync folders directly between your devices, encrypted and without a third-party cloud: Syncthing as peer-to-peer sync …

All your news sources in one place, no algorithm and no tracking: FreshRSS as a self-hosted RSS reader behind Traefik – …

A tidy start dashboard for your server: Homepage links every service, shows system load and the live Docker container …

Build a static website with Hugo and serve it from a Docker container behind Traefik – fast, secure, no database. …

Why does every app recipe declare a proxy network? This guide explains Docker networks, internal DNS and container …

Certificate, chain of trust, Let's Encrypt, handshake: this foundational guide explains HTTPS with real commands – and …

Set up Forgejo with Docker & Traefik: your own Git server with HTTPS, repos via web UI, cloning over HTTPS and SSH – the …

Set up HitKeep with Docker and Traefik: cookieless, GDPR-friendly website statistics on your own server – with tracking …

Set up CrowdSec with the Traefik bouncer: detect attacks from the access logs, block attackers with a 403 and benefit …

A complete monitoring stack of Prometheus, node-exporter, cAdvisor and Grafana behind Traefik – with live metrics for …

Set up Jellyfin with Docker behind Traefik: stream your movies, series and music – with HTTPS and the library on …

Set up Immich with Docker behind Traefik: the self-hosted alternative to Google Photos – with automatic phone backup, …

Set up Paperless-ngx with Docker behind Traefik: archive documents searchably via OCR – with full-text search, tags and …

Get your Nextcloud admin overview green: set up HSTS headers, email sending, enforced two-factor auth and brute-force …

Set up Uptime Kuma behind Traefik and monitor your services: monitors, notifications and a status page – the first real …

Set up Nextcloud with Docker behind Traefik: your own cloud for files, calendar and contacts – with MariaDB, Redis and …

Self-host Vaultwarden: a lean, Bitwarden-compatible password manager behind Traefik with HTTPS, an admin panel and an …

Traefik as a reverse proxy in front of your containers, with automatic Let's Encrypt certificates: every app gets a …