Tag: traefik

Admin blocks on nginx, Caddy, and Traefik let 2 or 3 of 13 spellings through. A forged Remote-User fooled all three. Caddy's open admin port took a new config.

Guide-style rate limits behind a CDN locked out a bystander on nginx, Caddy, and Traefik. Trusting X-Forwarded-For let a forger through 20 of 20. Fixes tested.

Seven copy-paste security headers gave nginx static files none, let Traefik overwrite an app's own CSP, and blocked self-framing. Tested configs for all three.

Same A+ before and after hardening, yet nginx drops from 25 TLS 1.2 suites to 3, and an old curve list silently strips post-quantum key exchange on all three.

Stock nginx shows its exact version on every response and hands your real cert to bare-IP scanners. We audited nginx, Caddy, and Traefik and fixed each leak.

Traefik, ingress-nginx, or HAProxy on k3s? ingress-nginx retired in March 2026. Install commands, IngressRoute vs Ingress, and the ServiceLB port trap.

Caddyfile zen vs Traefik labels-everywhere, picking a reverse proxy for self-hosted services in 2026. Real configs, real gotchas.

Master Traefik's label-based routing in Docker: entrypoints, routers, middlewares, TLS, and the mental model that makes it all click.