Mount Traefik static / dynamic configuration to support plugins

[sbordeyne]

Is your feature request related to a problem?

Traefik includes a large plugin catalog, including very useful ones like fail2ban or traefik-keycloak which are not installable on the truechart version of the service.

Describe the solution you'd like

Either :

• Be able to mount /etc/traefik/traefik.yml from a host path or NFS mount
• Have the plugin catalog parsed and be integrated in the questions.yml (we could have a choice of plugins to be installable from a single click, the installation process is not too convoluted)
• Maybe add the configuration as a configmap we can edit with k3s kubectl edit configmap --namespace=ix-traefik ?

Describe alternatives you've considered

Aside from deploying traefik with the custom-app chart, there's really no alternative

Additional context

This issue specifically about traefik plugins has already been opened, but lacks some details https://github.com/truecharts/charts/issues/7799

The most useful plugins to be able to have available would be, in my opinion :

• fail2ban
• Souin (for caching)
• DenyIP Plugin
• ldapAuth (since TC includes openldap, could be an alternative to authelia)
• Geoblock
• Log4Shell (to address the log4j vulnerability if still exposed)
• Traefik Real IP
• JWT Middleware
• Keycloak Middleware

Depending on the setup, each of these plugin can be used to increase security, and reduce load on the proxied services.

I've read and agree with the following

• [X] I've checked all open and closed issues and my request is not there.
• [X] I've checked all open and closed pull requests and my request is not there.

[sbordeyne]

I forgot to mention it, but plugins work by adding middlewares to traefik, these could be pretty easily automated

[PrivatePuffin]

Im closing this. Discussion and issues already exist and I prefer not to repeat myself.