# Traefik & Let’s Encrypt

# Traefik Reverse Proxy

##### Traefik is a reverse proxy that:

Routes requests from your domain to the right container.  
Terminates SSL using \*\*Let’s Encrypt\*\*.  
Handles automatic certificate renewals.

This means you don’t have to touch nginx config files or manually manage certs.

##### Traefik docker-compose.yml

Create a folder:

```
mkdir -p ~/traefik
cd ~/traefik
```

# Create Traefik File

##### docker-compose.yml

```
networks:
proxy:
external: false
volumes:
traefik_letsencrypt: {}
services:
traefik:
image: traefik:v3.1
container_name: traefik
command:
- --providers.docker=true
- --providers.docker.exposedbydefault=false
- --entrypoints.web.address=:80
- --entrypoints.websecure.address=:443
- --entrypoints.web.http.redirections.entryPoint.to=websecure
- --entrypoints.web.http.redirections.entryPoint.scheme=https
- --certificatesresolvers.letsencrypt.acme.tlsChallenge=true
- --certificatesresolvers.letsencrypt.acme.email=books@aimatrix.one
- --certificatesresolvers.letsencrypt.acme.storage=/letsencrypt/acme.json
ports:
- "80:80"
- "443:443"
volumes:
- /var/run/docker.sock:/var/run/docker.sock:ro
- traefik_letsencrypt:/letsencrypt
networks:
- proxy
restart: unless-stopped
```