David Wicker

wicker-01

Front door

Traefik

Every request to every site arrives here first.

Certificates
Let’s Encrypt, renewed automatically
Routes by
hostname
Open to the internet
web and mail ports only

Five domains and dozens of hostnames point at one address. Traefik reads which hostname a visitor asked for and hands the request to that app’s container. It also terminates TLS, renewing every certificate from Let’s Encrypt on its own.

Coolify writes its routing rules from each app’s domains, so adding a site is a DNS record and a field in a form.