4: Traefik - Reverse Proxy (essential)

Now that your infrastructure is ready, it's time to install Traefik - the most important service you'll set up. Traefik handles secure connections and routing for all your other applications.

What is Traefik? (Simple Explanation)

Traefik is like a smart traffic director for your server. Think of it as a receptionist at a large office building who:

• Greets visitors (web traffic) at the front door
• Checks their ID (verifies security certificates)
• Directs them to the right office (routes traffic to the correct application)
• Makes sure they use the secure elevator (forces HTTPS)

Why Traefik is essential:

• ✅ Automatic SSL certificates - Makes your websites secure (HTTPS)
• ✅ Domain routing - Directs traffic to the right application
• ✅ Security - Protects your applications from direct internet access
• ✅ Required by other apps - Most Infinity Tools applications need Traefik

Why Install Traefik First?

Traefik should be installed before any other application because:

• Other apps depend on it - Many applications will ask if you want to use Traefik
• SSL certificates - It handles secure connections for all your services
• Domain management - It routes traffic based on your domain names
• Security foundation - It provides a secure gateway to your applications

Without Traefik: You'd have to manually configure SSL certificates and routing for each application - a complex and time-consuming process.

What You'll Need

Before installing Traefik, make sure you have:

• ✅ Docker installed (from Chapter 3)
• ✅ Docker network set up (from Chapter 3)
• ✅ A domain name (optional but recommended)
• ✅ An email address (for SSL certificate notifications)

About Domain Names

What is a domain name? It's like your website's address (e.g., mywebsite.com).

Why you need one: Traefik uses your domain name to create SSL certificates and route traffic. Without one, you can still use Traefik, but you'll get security warnings in your browser.

Examples of domain names:

• myinfinitytools.com
• myserver.example.com
• home.mydomain.net

Don't have a domain? That's okay! You can still install Traefik and add a domain later, or use your server's IP address directly.

Step 1: Start Infinity Tools

Make sure you're connected to your server via SSH, then start Infinity Tools:

sudo infinity-tools

Step 2: Navigate to Traefik Installation

In the Infinity Tools menu, you'll see several sections. Look for:

• 🔐 SECURITY & NETWORKING - This is where Traefik is located

Use your arrow keys to navigate to this section and press Enter.

Using the Infinity Tools GUI

The Infinity Tools interface makes everything easy to find and use:

• ✅ Color-coded sections - Each category has its own color
• ✅ Clear descriptions - Hover over options to see what they do
• ✅ Status indicators - Shows if services are running or stopped
• ✅ Progress bars - Shows installation progress in real-time

Look for the turquoise cursor - it shows exactly what you're about to select!

Step 3: Install Traefik

In the Security & Networking menu, you'll see:

• Install Traefik - This is what you want

Select "Install Traefik" and press Enter.

What Happens During Installation

Traefik installation will:

• Create a configuration file
• Set up SSL certificate management
• Create a Docker container
• Configure the reverse proxy
• Start the service

This usually takes 1-2 minutes.

Step 4: Configure Traefik

During installation, you'll be asked a few questions:

Email Address for SSL Certificates

You'll see a prompt like:

Enter email address for SSL certificates:
[admin@example.com]

What to enter: Use a valid email address you check regularly. This is used for SSL certificate notifications and warnings.

Examples:

• admin@myinfinitytools.com
• your-email@gmail.com
• notifications@yourdomain.com

Domain Name (Optional)

If you have a domain name, you'll be asked:

Enter your domain name (or press Enter to skip):
[myinfinitytools.com]

If you have a domain: Enter it here (e.g., myinfinitytools.com)

If you don't have a domain: Press Enter to skip - you can add this later

IPv6 Configuration

You might be asked about IPv6 support:

Do you want to enable IPv6 support?
Y) Yes - Enable both IPv4 and IPv6
N) No - IPv4 only (recommended for beginners)

For beginners: Choose "N" (No) - IPv4 only is simpler and works fine for most use cases.

Step 5: Wait for Installation

After answering the questions, Traefik will install and start. You'll see messages like:

📦 Installing Traefik...
🔧 Creating configuration...
🌐 Starting Traefik container...
✅ Traefik installed successfully!

Step 6: Verify Traefik is Working

After installation completes, let's make sure Traefik is running properly.

Check Traefik Status

In the Infinity Tools menu, go to:

• 📊 STATUS & HEALTH → STATUS

You should see Traefik listed as "RUNNING" or "ACTIVE".

Using the Status Dashboard

The Status & Health section gives you a complete overview of your system:

• ✅ Service Status - Shows which applications are running
• ✅ System Health - CPU, memory, and disk usage
• ✅ Docker Info - All your containers and their status
• ✅ Network Status - Shows your Docker networks

Look for the green checkmarks - they indicate everything is working properly!

Check Docker Containers

You can also check by going to:

• 📊 STATUS & HEALTH → DOCKER INFO

Look for a container named "traefik" - it should be running.

Understanding the Docker Info Screen

The Docker Info section shows you:

• 🐳 Container Name - What the container is called
• 📊 Status - Running, stopped, or restarting
• 🌐 Ports - Which ports the container is using
• 💾 Memory Usage - How much RAM it's using

Green status means everything is working! Red or yellow means there might be an issue.

Step 7: Understanding What Was Created

Traefik installation creates several important files and configurations:

Configuration Files

Traefik stores its configuration in:

• /opt/speedbits/traefik/traefik.yml - Main configuration
• /opt/speedbits/traefik/docker-compose.yml - Docker setup

SSL Certificates

SSL certificates are stored in:

• /opt/speedbits/traefik/letsencrypt/ - Let's Encrypt certificates

Docker Container

Traefik runs as a Docker container that:

• Listens on ports 80 (HTTP) and 443 (HTTPS)
• Automatically redirects HTTP to HTTPS
• Manages SSL certificates
• Routes traffic to your applications

Step 8: Test Traefik (If You Have a Domain)

If you configured a domain name, you can test Traefik by visiting your domain in a web browser.

What You Should See

When you visit your domain, you should see:

• A secure connection (HTTPS) - look for the lock icon in your browser
• Either a "404 Not Found" page (normal - no apps installed yet) or a Traefik dashboard

If You Don't Have a Domain

You can still test Traefik by visiting your server's IP address:

• Visit http://YOUR_SERVER_IP in your browser
• It should redirect to https://YOUR_SERVER_IP
• You'll see a security warning (normal without a domain)

What's Next?

Congratulations! You now have Traefik installed and running. This means:

• ✅ SSL certificates are automatically managed
• ✅ Secure connections are enforced
• ✅ Domain routing is ready
• ✅ Other applications can now be installed

Ready for Applications

Now you can install any of the applications in Infinity Tools:

• WordPress - For websites and blogs
• Vaultwarden - For password management
• Nextcloud - For file storage and sharing
• And many more!

When you install these applications, they'll automatically work with Traefik to provide secure, domain-based access.

Troubleshooting

Traefik Won't Start

If Traefik fails to start:

• Check that Docker is running: sudo systemctl status docker
• Check Docker logs: docker logs traefik
• Verify the configuration: cat /opt/speedbits/traefik/traefik.yml
• Try restarting: docker restart traefik

SSL Certificate Issues

If SSL certificates aren't working:

• Make sure your domain points to your server's IP address
• Check that ports 80 and 443 are open
• Wait a few minutes for certificates to be issued
• Check Traefik logs: docker logs traefik | grep -i acme

Can't Access Traefik

If you can't access Traefik:

• Check that Traefik is running: docker ps | grep traefik
• Verify ports are open: sudo ss -tulnp | grep :80
• Check firewall settings
• Try accessing via IP address instead of domain

Quick Reference

Check Traefik status:

docker ps | grep traefik

View Traefik logs:

docker logs traefik

Restart Traefik:

docker restart traefik

Check SSL certificates:

ls -la /opt/speedbits/traefik/letsencrypt/

You're Ready!

Traefik is now installed and running! This is the foundation that makes all your other applications work securely and efficiently.

What you accomplished:

• ✅ Installed and configured Traefik
• ✅ Set up automatic SSL certificate management
• ✅ Created a secure gateway for your applications
• ✅ Prepared your system for other applications

Next step: You can now install any application from the Infinity Tools menu. Each application will automatically work with Traefik to provide secure, domain-based access.

What You Learned

• Traefik - A reverse proxy that handles SSL and routing
• SSL Certificates - Automatic security certificates for your domains
• Domain Routing - How traffic is directed to the right application
• Infrastructure Foundation - The base layer that supports all other services

You now have a solid foundation for running secure, professional applications on your server!

---

Next: Installing Your First Application (Coming Soon)