Proxy

On all of our 🐳 Docker systems, we’re running a Traefik Proxy, to dispatch all incoming HTTP/HTTPS requests to the desired Docker containers.

Note

The deployment, and all documentation for the proxies can be found in the GitLab proxy project.

Proxy dashboards

The Traefik proxies provide dashboards, which can be used to see the configured routes & services.

Check out the Dashboard for the proxy dashboard URL’s.

Routing requests

Routing proxy requests will happen through Docker labels, which are automatically discovered by Traefik.

Important

Since we’ve marvinCI, which is leveraged by our GitLab CI pipelines, these labels will be applied automatically. Thus only Shared GitLab CI files should be used for deployments.

See also

To learn more about the deployment URL scheme, check out the Environments documentation.

Proxy LDAP authentication

We’ve developed our own LDAP authentication middleware for the Traefik Proxy.

It will enforce HTTP basic authorisation, and checks the credentials against our LDAP. To reduce the load on the LDAP, we’ve also added a caching layer.

Note

The LDAP authentication plugin, and its documentation can be found in the ldapAuth directory of the GitLab proxy project.