Traefik is the reverse proxy and ingress controller running in the Kubernetes cluster. It handles external traffic routing, TLS termination, and automatic HTTPS certificates via Let's Encrypt.
Traefik reads ingress resources from the Kubernetes cluster to route traffic. All external services are exposed through Traefik.
| Subdomain | Target | Service |
|---|---|---|
| danieltmc.com | K8s cluster IP | Traefik |
| wiki.danieltmc.com | K8s cluster IP | Wiki.js |
| rancher.danieltmc.com | K8s cluster IP | Rancher |
| plex.danieltmc.com | 192.168.1.132 | Plex |
Traefik automatically obtains and renews TLS certificates via Let's Encrypt. No manual certificate management is required.
To verify TLS status for a domain:
# Check Traefik logs for certificate issuance
kubectl logs -n kube-system -l app=traefik
Common middleware configured in Traefik:
kubectl get pods -n <namespace>kubectl describe ingress <name>kubectl logs -n kube-system -l app=traefiknslookup wiki.danieltmc.com