terraform-docker-traefik-v2

An opinionated Terraform module to provision a Traefik v2 reverse proxy/load balancer container on a Docker host in Swarm mode. See the variables file for the available configuration options.

Tutorial

Provision a Docker Swarm Host with Traefik (v2) on Hetzner Cloud using Terraform Modules - Part 2

Compatibility

This module is meant for use with Terraform 0.13 or higher.

Features

• [x] Create a Traefik load balancer/proxy service on a Docker Swarm mode host
• [x] Support for multiple (optional) Let's Encrypt dnsChallenge providers
• [x] Traefik dashboard enabled and protected by HTTP Basic Auth. Configurable password
• [x] Acquire (generate) HTTPS certificates automatically (including renewals) with Let's Encrypt via Docker labels.
• [x] Example deployment repository
• [ ] Include additional dnsChallenge providers
• [ ] Document optional dnsChallenge variables

Traefik Configuration

• HTTP --> HTTPS redirect configured via RedirectScheme middleware
• Production & Staging Let's Encrypt httpChallenge resolvers configured by default (Docker label values are letsEncrypt and letsEncryptStaging respectively)
• Support for optional dnsChallenge providers (currently supported providers: cloudflare). Docker labels for enabled providers use the following syntax: <provider_name> or <provider_name>Staging. e.g. cloudflare,cloudflareStaging.
• Dashboard enabled and password protected by Basic Auth middleware
• Containers balanced/proxied by Traefik are not exposed by default. Exposed via the traefik.enabled Docker label
• Port 80/443 published in host mode to allow client IP forwarding
• Prometheus metrics enabled. Entrypoint: /metrics (not publicly exposed)

Usage

Basic usage of this module is as follows:

module "docker-traefik" {
  source = "github.com/colinwilson/terraform-docker-traefik-v2"

  password                   = "my_password"         # optional
  traefik_network_attachable = true                  # optional
  acme_email                 = "[email protected]"
  hostname                   = "traefik.example.com"
  live_cert                  = true                  # optional
  lets_encrypt_keytype       = "EC384"               # optional
  lets_encrypt_resolvers     = ["cloudflare"]        # optional
}

A Functional example is included in the examples directory or clone the docker-traefik branch here

Inputs

Required

Optional

Outputs

Requirements

These sections describe requirements for using this module.

Software

The following dependencies must be available:

• Terraform v0.13
• Terraform Provider for Docker version 2.8.x