How to configure traefik?

[mattfysh]

When deploying the k3s node with traefik, is there a way to change:

1. the default TLS options
2. disable port 80 on the loadbalancer
3. change the websecure port to something other than 443?

[alexellis]

Hi @mattfysh if this is the route you'd like go down, then the pre-installed Traefik is probably not the best option for you.

Instead, install with --no-traefik and then use arkade install traefik and pass in the various --set arguments you wish to use, or simply install Traefik in a completely customised fashion using its values.yaml file.

We cannot support you with Traefik directly, but I'm sure you can find what you need in their docs.

Alex

[mattfysh]

this seems to work, given that k3s allows you to customize bundled components. the only thing I couldn't use was asDefault which appears to be a traefik v3 feature, whereas k3s has bundled v2

traefik-config.yaml

apiVersion: helm.cattle.io/v1
kind: HelmChartConfig
metadata:
  name: traefik
  namespace: kube-system
spec:
  valuesContent: |-
    ports:
      web:
        expose:
          default: false
      websecure:
        # asDefault: true
        exposedPort: 31111
    tlsOptions:
      default:
        labels: {}
        sniStrict: true
        alpnProtocols: ['http/1.1']

scp traefik-config.yaml $SERVER:/home/debian/traefik-config.yaml

ssh $SERVER sudo \
  mv traefik-config.yaml /var/lib/rancher/k3s/server/manifests/traefik-config.yaml

it seems to survive k3sup install upgrades too 🎉