Traefik part 1: proxies inside the walls

One Traefik per host, wildcard certs via DNS-01 with zero open ports, and routing declared as labels on the containers themselves. Plus three footguns, ranked by how many hours each took from me.

March 14, 2026 · 4 min