在本地主机上将 HTTP 重定向到 HTTPS

Question

我想在我的本地机器上进行开发设置，以便更轻松地测试我的程序的新版本 - 这是一个 server/client 应用程序。客户端确实需要 SSL，所以我想让 traefik 作为（本地）服务器的代理，它将使用自签名证书。

我设法在没有 SSL 的情况下建立连接，但是一旦我启用 HTTPS/重定向，traefik 仅响应 "backend not found" "/" 0ms.

根据我的浏览器，SSL 证书有效。

这是我的设置：

traefik.toml

[docker]
watch = true
exposedByDefault = false

logLevel = "DEBUG"
defaultEntryPoints = ["https", "http"]

[accessLog]
[traefikLog]

[entryPoints]
  [entryPoints.http]
  address = ":80"
    [entryPoints.http.redirect]
    entryPoint = "https"
  [entryPoints.https]
  address = ":443"
  [entryPoints.https.tls]
    [[entryPoints.https.tls.certificates]]
      ca = "etc/traefik/ca.cert.pem"
      certFile = "/etc/traefik/dev-cert.pem"
      keyFile = "/etc/traefik/dev-key.nopass.pem"

# API definition
[api]
entryPoint = "traefik"
dashboard = true

docker-compose.yaml

version: '3'
services:
  edv-reverse-proxy:
    image: traefik
    container_name: edv-reverse-proxy
    expose:
      - 8080
    ports:
      - 80:80
      - 443:443
      - 8080:8080
    volumes:
      - ./traefik/dev-cert.pem:/etc/traefik/dev-cert.pem
      - ./traefik/dev-key.nopass.pem:/etc/traefik/dev-key.nopass.pem
      - ./traefik/ca.cert.pem:/etc/traefik/ca.cert.pem
      - ./traefik/traefik.toml:/etc/traefik/traefik.toml
      - /var/run/docker.sock:/var/run/docker.sock
    networks:
      - proxy

  whoami:
    image: emilevauge/whoami
    expose:
      - 80
    labels:
      - traefik.enable=true
      - "traefik.frontend.rule=Host:whoami.test"
      - traefik.port=80
    networks:
      - proxy

networks:
  proxy:
    external: true

/etc/hosts

127.0.0.1       whoami.test

如果我禁用整个入口点部分，我可以像预期的那样使用 whoami.test 连接到该服务。我尝试了很多不同的设置，但似乎没有任何效果。

因此，如果有人知道如何解决这个问题，我将非常高兴！

Answer 1

字段顺序在 toml 中很重要：

logLevel = "DEBUG" # <---
defaultEntryPoints = ["https", "http"] # <---

[accessLog]
[traefikLog]

[entryPoints]
  [entryPoints.http]
  address = ":80"
    [entryPoints.http.redirect]
    entryPoint = "https"
  [entryPoints.https]
  address = ":443"
  [entryPoints.https.tls]
    [[entryPoints.https.tls.certificates]]
      ca = "etc/traefik/ca.cert.pem"
      certFile = "/etc/traefik/dev-cert.pem"
      keyFile = "/etc/traefik/dev-key.nopass.pem"

# API definition
[api]
entryPoint = "traefik"
dashboard = true

[docker]
watch = true
exposedByDefault = false

Answer 2

对于 traefik v2.1 默认路由器 http 到 https 重定向，您可以执行以下操作：

traefik:
    image: traefik:v2.1
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
    ports:
      - 80:80
      - 443:443
    labels:
      - "traefik.enable=true"
      ### Default HTTP Router
      - "traefik.http.routers.default-http2https.rule=HostRegexp(`{subdomain:[a-z,0-9]+}.example.com`)"
      - "traefik.http.routers.default-http2https.entrypoints=http"
      - "traefik.http.routers.default-http2https.middlewares=https-redirect@file"
      ### SSL
      - "traefik.http.routers.frontend.rule=Host(`traefik.example.com`)"
      - "traefik.http.routers.frontend.entrypoints=https"
      - "traefik.http.routers.frontend.tls.certresolver=example.com"
      - "traefik.http.routers.frontend.tls.domains[0].main=example.com"
      - "traefik.http.routers.frontend.tls.domains[0].sans=*.example.com"
      - "traefik.http.routers.frontend.service=api@internal"

我在这里找到了解决方案：https://docs.traefik.io/routing/routers/#rule

在本地主机上将 HTTP 重定向到 HTTPS

Redirect HTTP to HTTPS on localhost

traefik