Traefik is a HTTP reverse proxy and load balancer for microservices. It integrates with popular orchestration systems, such as Kubernetes, to provide seamless and automatic service discovery, load balancing, and proxying for your applications. Traefik is designed to be fast, efficient, and easy to use, making it a good solution for home lab environments. With Traefik, you can expose your applications to the internet with ease, providing remote access to your services from anywhere. Whether you're looking to host a personal website, run a web-based service, or simply provide external access to your applications.
Install with:
helm repo add traefik-charts https://helm.traefik.io/traefik/
helm install traefik traefik-charts/traefik -f values.yamlSee examples from other people.
| Name | Repo | Stars | Version | Timestamp |
|---|---|---|---|---|
| traefik | tyriis/home-ops | 39 | 33.0.0 | 21 days ago |
| traefik | xunholy/k8s-gitops | 512 | 32.0.0 | 2 months ago |
| traefik | h3mmy/bloopySphere | 62 | 29.0.1 | 4 months ago |
See the most popular values for this chart:
| Key | Types |
|---|---|
| boolean | |
globalArguments[] (22) - --api.insecure=true | string |
| boolean | |
| boolean | |
| string | |
| boolean | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| boolean | |
logs.access.filters.statuscodes (1) 200,300-302 | string |
| string | |
| string | |
logs.general.filePath (1) /data/logs/access.log | string |
| boolean | |
| string | |
ports.websecure.tls.domains[].main (3) ${SECRET_DOMAIN} | string |
ports.websecure.tls.domains[].sans[] (3) - *.${SECRET_DOMAIN} | string |
ports.websecure.tls.domains[].bloop (1) ${SECRET_DOMAIN} | string |
ports.websecure.tls.domains[].lilj (1) ${LILJ_DOMAIN} | string |
ports.websecure.tls.domains[].tyg3r (1) ${TGR_DOMAIN} | string |
| string | |
ports.websecure.tls.stores (2) networking-default@kubernetescrd | string |
| number | |
| number | |
ports.websecure.forwardedHeaders.trustedIPs[] (3) - "10.0.0.0/8" | string |
| boolean | |
| string | |
| boolean | |
| boolean | |
| boolean | |
ports.websecure.middlewares[] (2) - network-bouncer@kubernetescrd | string |
| boolean | |
ports.websecure.proxyProtocol.trustedIPs[] (1) - "192.168.1.0/24" | string |
ports.websecure.trustedIPs[] (1) - ${CALICO_NODE_CIDR} | string |
| number | |
| number | |
| boolean | |
| boolean | |
| boolean | |
| string | |
| boolean | |
| boolean | |
| boolean | |
| number | |
| number | |
| string | |
ports.web.redirectTo.port (11) websecure | string |
| number | |
ports.web.redirectTo (11) websecure | string |
| number | |
| number | |
| string | |
| boolean | |
| boolean | |
| boolean | |
| number | |
| number | |
| boolean | |
| string | |
| boolean | |
| number | |
| number | |
| string | |
| boolean | |
| number | |
| number | |
| string | |
| boolean | |
| number | |
| number | |
| boolean | |
ports.ldaps.tls.options (1) default | string |
| boolean | |
| number | |
| number | |
| string | |
| boolean | |
| number | |
| number | |
| boolean | |
ports.mqtts.tls.options (1) default | string |
| boolean | |
| number | |
| number | |
| boolean | |
| boolean | |
| number | |
| number | |
| string | |
| boolean | |
| number | |
| number | |
| string | |
| boolean | |
| number | |
| number | |
| string | |
| boolean | |
| boolean | |
| number | |
| string | |
| boolean | |
| number | |
| number | |
| boolean | |
ports.wss.tls.options (1) default | string |
| boolean | |
service.type (21) LoadBalancer | string |
| string | |
service.spec.loadBalancerIP (14) ${METALLB_TRAEFIK_ADDR} | string |
service.spec.LoadBalancerIPs (1) ${CLUSTER_LB_TRAEFIK} | string |
service.annotations."io.cilium/lb-ipam-ips" (5) ${CLUSTER_LB_TRAEFIK} | string |
| string | |
service.annotations."metallb.universe.tf/loadBalancerIPs" (3) ${METALLB_INGRESS_ADDR} | string |
service.annotations."external-dns.alpha.kubernetes.io/hostname" (1) kyz.${SECRET_PUBLIC_DOMAIN} | string |
service.annotations."metallb.universe.tf/loadBalancerIP" (1) ${LB_TRAEFIK_ADDRESS} | string |
service.single (3) false | boolean |
| string | |
service.ipFamilies[] (2) - IPv4 | string |
service.ipFamilyPolicy (2) RequireDualStack | string |
service.loadBalancerIPs[] (2) - ${LB_IP} | string |
additionalArguments[] (20) - --providers.kubernetesingress.ingressendpoint.ip=${METALLB_TRAEFIK_ADDR} | string |
tlsOptions.default.minVersion (20) VersionTLS12 | string |
tlsOptions.default.maxVersion (19) VersionTLS13 | string |
| boolean | |
tlsOptions.default.cipherSuites[] (1) - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 | string |
tlsOptions.default.curvePreferences[] (1) - secp521r1 | string |
tlsOptions.plex.maxVersion (1) VersionTLS13 | string |
tlsOptions.plex.minVersion (1) VersionTLS12 | string |
| number | |
deployment.kind (18) Deployment | string |
| boolean | |
deployment.initContainers[].command[] (1) - sh | string |
deployment.initContainers[].image (1) busybox:1.35.0 | string |
deployment.initContainers[].name (1) volume-permissions | string |
| string | |
| string | |
| number | |
| boolean | |
| number | |
pilot.enabled (19) false | boolean |
| string | |
| string | |
| string | |
| string | |
| boolean | |
experimental.plugins.bouncer.moduleName (1) github.com/maxlerebourg/crowdsec-bouncer-traefik-plugin | string |
| string | |
experimental.plugins.ldapAuth.moduleName (1) github.com/wiltonsr/ldapAuth | string |
| string | |
experimental.plugins.real-ip.moduleName (1) github.com/Paxxs/traefik-get-real-ip | string |
| string | |
experimental.plugins.themepark.moduleName (1) github.com/packruler/traefik-themepark | string |
| string | |
experimental.plugins.traefik-plugin-blockuseragent.moduleName (1) github.com/agence-gaya/traefik-plugin-blockuseragent | string |
| string | |
| boolean | |
| boolean | |
| boolean | |
| boolean | |
| boolean | |
| boolean | |
| string | |
| boolean | |
| boolean | |
| boolean | |
| string | |
| boolean | |
| boolean | |
providers.kubernetesIngress.ingressEndpoint.ip (2) ${TRAEFIK_IP} | string |
image.name (7) traefik | string |
image.tag (4) 2.5.6 | string |
image.repository (3) traefik | string |
image.pullPolicy (2) IfNotPresent | string |
| string | |
| string | |
| string | |
| string | |
affinity.podAntiAffinity.requiredDuringSchedulingIgnoredDuringExecution[].labelSelector.matchLabels."app.kubernetes.io/instance" (1) {{ .Release.Name }}-{{ .Release.Namespace }} | string |
| string | |
| string | |
| string | |
| string | |
| number | |
| string | |
| boolean | |
| string | |
| boolean | |
| string | |
| string | |
metrics.prometheus.serviceMonitor.metricRelabelings[].regex (1) ^fluentd_output_status_buffer_(oldest|newest)_.+ | string |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
| string | |
metrics.prometheus.serviceMonitor.relabelings[].sourceLabels[] (1) - __meta_kubernetes_pod_node_name | string |
| string | |
| string | |
| string | |
| boolean | |
| string | |
| string | |
metrics.prometheus.prometheusRule.rules[].annotations.description (1) {{ $labels.pod }} on {{ $labels.nodename }} is down | string |
| string | |
metrics.prometheus.prometheusRule.rules[].expr (1) up{job="traefik"} == 0 | string |
| string | |
| string | |
| string | |
| boolean | |
| boolean | |
| boolean | |
| number | |
| number | |
| string | |
env[].value (3) ${CLUSTER_TIMEZONE} | string |
env[].valueFrom.secretKeyRef.key (1) CLOUDFLARE_API_KEY | string |
env[].valueFrom.secretKeyRef.name (1) home-secrets | string |
rbac.enabled (3) true | boolean |
rbac.namespaced (1) false | boolean |
| boolean | |
persistence.path (2) /certs | string |
persistence.size (2) 128Mi | string |
persistence.accessMode (1) ReadWriteOnce | string |
| string | |
persistence.storageClass (1) filesystem | string |
| number | |
| number | |
tlsStore.default.defaultCertificate.secretName (2) ${SECRET_PUBLIC_DOMAIN/./-}-tls | string |
volumes[].mountPath (2) /etc/traefik/crowdsec-certs/ | string |
volumes[].name (2) crowdsec-bouncer-tls | string |
volumes[].type (2) secret | string |
| number | |
| string | |
certResolvers.letsencrypt.dnsChallenge.resolvers[] (1) - "1.1.1.1" | string |
certResolvers.letsencrypt.email (1) nick@shoresmedia.com | string |
certResolvers.letsencrypt.storage (1) /data/acme.json | string |
| boolean | |
| string | |
fullnameOverride (1) traefik | string |
hostNetwork (1) false | boolean |
| number | |
| number | |
| number | |
| number | |
| number | |
| boolean | |
| number | |
| string | |
| number | |
| number | |
| number | |
| number | |
| number | |
| string | |
| boolean | |
| number | |
| boolean | |
| number | |
| string | |
tolerations[].key (1) node-role.kubernetes.io/master | string |
| string |