Put Wildcard Certificates and SSL on EVERYTHING - Traefik + Portainer Tutorial

Today, we're going to use SSL for everything. No more self-sign certs. No more http. No more hosting things on odd ports. We're going all in with SSL for our internal services and our external services too. We going to set up a reverse proxy using Traefik, Portainer, and use that to get wildcard certificates from Let's Encrypt. Join me and let's secure all the things.

(Affiliate links may be included in this description. I may receive a small commission at no cost to you.)

00:00 - What are we doing today?
01:03 - What do we need?
02:51 - What is Traefik?
03:51 - Setting up Traefik
04:27 - Traefik configuration
06:18 - Traefik with Docker Compose
07:00 - Traefik Docker Compose File with Wildcards
10:46 - Spinning Up Traefik
12:09 - Traefik Dashboard
12:34 - We have Wildcards!
13:01 - Portainer Docker Compose
15:19 - Spinning up Portainer
15:41 - Portainer in Traefik Dashboard
15:58 - Portainer now has SSL
16:39 - Proxy Through Traefik to External Services (Proxmox)'
17:34 - Traefik Routes Config
21:38 - Apply Traefik Route Config
22:26 - See Our New External Route
22:45 - SSL for Proxmox with Traefik Reverse proxy
23:41 - Hosting all of your Homelab Services with SSL
23:59 - Which Reverse Proxy Are You Running?
24:11 - Stream Highlight - "I built my server, not sure where to go from here..."

#Traefik #Portainer #Homelab

"Sun Run" is from Harris Heller's album Breaker.

Thank you for watching!

[TechnoTim]

What are you using to get your certificates?

[shawn]

Half the views came from me watching it over and over.

[henrysowell]

I know this is an older video, but I just wanted to drop in and say thank you. I really appreciate all you do for the community

[thiggs]

I was originally soooo frustrated following this tutorial. I went step by step, and took SEVEN hours just to figure out that I had some typos! Thanks @Techno Tim, amazing tutorial. I'm so glad I stuck it out! For anyone else struggling, highly recommend looking over your work even when you copy and paste!

[PaulLittlefield]

The best video on SSL with Portainer and Træfik, period. Thank you so much for your slow and clear approach with excellent quality of video. Keep up the great work Tim! 🐧

[patrickjoseph]

Just wanted to say thank you, Tim!!! I've been wanting to set up ssl for a few months now but have been intimidated by it all. After learning how to create a ansible playbook to update, upgrade-dist for my VMs last week . I was like I can do this ssl thing so I bought a domain and watched this video like 10 times but I now have my local services all running with ssl thanks to you. All your videos are great and very infomitve. You and the homelab YouTube community is amazing .. thank you again so much

[lfelfoldi]

This is literally my first ever comment in 8 years. I really enjoy your content. You keep it simple, relatable, and most importantly you tied different services together not just one by one in all different videos. You show the end game scenario. Patreon it is brother.

[einsteinx]

I just found your channel and have binged a few videos as I’m right in the process of upgrading my home Proxmox server and home network. I swear you somehow have a video for exactly each thing I was about to do, with detailed instructions and configs (NUT, Proxmox setup, SSL and FQDM for local services, etc etc). These are fantastic jumping off points for my own custom configs and I love that you go into such detail and explain WHY you do things not just a list of steps, as I usually will want a different configuration and am even more interested in the why than the how. Fantastic channel, I hope to see you continue to grow it!

[CrashLoopBackOff-Ks]

Came across this video just today, and I wanted to leave a comment for the algorithm, along with liking and subscribing. Really appreciate you giving away the hours of trial and error that it had to have taken to get these configs dialed in. I also appreciate your clear and straightforward delivery. Great job with this.

[ChappIOMusic]

Nice! I've been running this setup for a few years as well. With one difference: I configured the file provider to watch a directory of .yml files. (see the watch option and the directory option). This allows me to create a .yml file PER site and the watch option makes it so I don't have to restart the container and take down the proxy.

[mattvisaggio]

I've watched this video twice fully and a few times in part over a period of several months. You've been a teacher for me and I appreciate you.

[floriantthebault]

I've been looking to do that for over a year and a half and scratching my head because it all seemed far too complicated a setup to bother with it all. Until I finally found your video... Damn, that one is very useful and simple to follow... as well as sufficiently detailed to really understand how it works under. Very well done and useful, thanks!

[ImARichard]

Love using traefik! It was actually where I started my homelab. A friend showed me traefik and something about it just caught my interest. Started spinning up a bunch of different containers with configs just for the sake of it.

Great video!

[quazl]

I use Nginx proxy manager, but this looks neat. I really need to move to wildcard, my let’s encrypt list is getting a little silly now.

Thanks, Tim for all you do!

[anishpatelwork]

Amazing tutorial. I can't tell you how long I've been annoyed with my homelab services not using SSL or just using the self signed stuff... it's so nice to have these being properly secured now.

[dionysiskouris]

I stumbled upon your channel today (started with high availability pihole), and I am amazed by the quality of your videos! It was insta subscribe, and I hope you will continue the excellent work Tim!

[elsammael]

This seems to be a bit more complex then what I am doing directly with PFSense and its HA Proxy and ACME plugins, but I like the nice dashboard that Traefik provides! Thanks Tim for the nice walk through!

[SirJohn]

After almost 3 years, this still works like a charm... Save my life... Kudos 👏😎

[bagellord]

Tim thank you so much for this video and tutorial. I got this up and running for my internal services, and it inspired me to also set up a separate process for the stuff I wanted to take external. Keep it up!

[mauricestriek]

Dude! Nice work! It's not about the complexity, it's about the way you describe and explain something...you nailed both.