Reverse proxy for secure traefik configurations.
The package is an alternative reverse proxy Nginx, this reverse proxy exposes packages using both subdomains and subdirectories to host the following services:
Superset
Sub Domain (e.g. superset.)
Jempi
Sub Domain (e.g. jempi.)
Santempi
Sub Domain (e.g. santempi.)
Kibana
Sub Domain (e.g. kibana.)
Minio
Sub Directory (e.g. /minio)
Grafana
Sub Directory (e.g. /grafana)
JSReport
Sub Directory (e.g. /jsreport)
OpenHim
Sub Domain (Frontend) Sub Directory (Backend) (e.g. openhim. and openhim./openhimcore)
Please ensure that the ENV "DOMAIN_NAME_HOST_TRAEFIK" is set, in this documentation we will be using the placeholder "domain" for its value
The following packages do not support subdomains and require the use of domain/subdomain to access over the reverse proxy
Set the following environment variable in the package-metadata.json in the "./dashboard-visualiser-superset" directory
Set the following environment variables in the package-metadata.json in the "./client-registry-jempi" directory
Set the following environment variables in the package-metadata.json in the "./client-registry-santempi" directory
Set the following environment variables in the package-metadata.json in the "./dashboard-visualiser-kibana" directory
Set the following environment variables in the package-metadata.json in the "monitoring" directory
The MinIO server is configured to run with the following port settings:
API Port: 9090
Console Port: 9001
Ensure that your Traefik configuration reflects these ports to properly route traffic to the MinIO services. The API can be accessed at https://<domain>/minio
and the Console at https://<domain>/minio-console
.
Update your Traefik labels in the docker-compose.yml
to match these settings:
Set the following environment variables in the package-metadata.json in the "monitoring" directory
Set the following environment variables in the package-metadata.json in the "dashboard-visualiser-jsreport" directory
Set the following environment variables in the package-metadata.json in the "./interoperability-layer-openhim" directory
Note: Only the Backend services are accessible through subdirectory paths, not the frontend
The following environment variables can be used to configure Traefik:
CERT_RESOLVER
le
The certificate resolver to use for obtaining TLS certificates.
CA_SERVER
The URL of the ACME server for certificate generation.
TLS
true
Enable or disable TLS encryption.
TLS_CHALLENGE
http
The challenge type to use for TLS certificate generation.
WEB_ENTRY_POINT
web
The entry point for web traffic.
REDIRECT_TO_HTTPS
true
Enable or disable automatic redirection to HTTPS.