We could shut off port 80 and 443 fully when making use of cloudflare's tunnels.
The initial commit sets the host ip to localhost, but As host_ip is seemingly not available for docker swarm, which would make sense in a distributed environment, most likely cloudflared should be added as service to the stack, allowing us to completely drop the port definition for traefik on production.
We could shut off port 80 and 443 fully when making use of cloudflare's tunnels.
The initial commit sets the host ip to localhost, butAshost_ip
is seemingly not available for docker swarm, which would make sense in a distributed environment, most likelycloudflared
should be added as service to the stack, allowing us to completely drop the port definition for traefik on production.