Runbook

Common tasks

Start the load balancer

docker compose up -d

Stop the load balancer

docker compose down

Update backend targets

Edit config/dynamic/tcp-services.yml.
Run docker compose config to catch Compose-level errors.
Watch Traefik logs:

docker compose logs -f traefik

Dynamic file-provider changes are watched by Traefik.

Troubleshooting

Container is unhealthy

Check container status and logs:

docker compose ps
docker compose logs traefik

Confirm that config/traefik.yml is mounted and that the ping entrypoint is enabled.

Clients cannot connect

Check that the host is listening on 80/tcp and 443/tcp, firewall rules allow inbound traffic, and backend IP addresses are reachable from the Traefik container. For services on the Docker host, configure backends as host.docker.internal:PORT.

Certificate HTTP-01 challenge fails

Check that port 80/tcp is reachable from the internet and that the matching *-acme service points to the local challenge responder port.

Wrong certificate is presented

Because TLS is passed through, the certificate comes from the selected backend. Check backend certificate configuration and SNI routing rules in config/dynamic/tcp-services.yml.

Rollback

Stop the Compose stack:

docker compose down

Revert the deployment commit or restore the previous load-balancer configuration.

1.4 KiB Raw Blame History