Refactor Traefik Wireguard Layer 7 proxy

EnigmaCurry / d.rymcg.tech

A collection of self-hosted docker-compose projects with Traefik reverse proxy, integrated auth, and administrative Makefiles for easy maintainance

MIT License

49 stars 8 forks source link

Refactor Traefik Wireguard Layer 7 proxy #236

Closed EnigmaCurry closed 2 months ago

EnigmaCurry commented 3 months ago

The traefik wireguard setup we have now is hard to configure because the client is set to terminate TLS, so it has two domains for everything, and two sets of TLS certs.

This can be simplified by using a single domain, single certificate, TLS passthrough, and Host-SNI routing.