README.md
Rama main · réplica de lectura del repositorio original.
<div align="center">
<img src="docs/public/images/icon.png" width="128" height="128" alt="Traefik Manager">
# Traefik Manager
**A clean, self-hosted web UI for your Traefik reverse proxy.**
Routes, middlewares, Services, Plugins, certificates, crowdsec and logs, without editing YAML by hand.
[](https://github.com/chr0nzz/traefik-manager/releases)
[](https://github.com/chr0nzz/traefik-manager/actions/workflows/docker.yml)
[](https://github.com/chr0nzz/traefik-manager/actions/workflows/tests.yml)
[](https://github.com/chr0nzz/traefik-manager/pkgs/container/traefik-manager)
[](LICENSE)
[](https://traefik-manager.xyzlab.dev/)
[](https://github.com/chr0nzz/traefik-manager/stargazers)
[](https://github.com/chr0nzz/traefik-manager/issues)
[](https://discord.gg/vRQCMrrjtz)
[](https://ko-fi.com/chr0nzz)
[](https://hosted.weblate.org/engage/traefik-manager/)
<sub>Built for homelabbers who love Traefik but hate editing YAML at 2am.</sub>
<p align="center">
<a href="https://traefik-manager.xyzlab.dev/ui-examples.html"><picture>
<source media="(prefers-color-scheme: dark)" srcset="docs/public/images/readme-carousel-dark.gif">
<img src="docs/public/images/readme-carousel-light.gif" width="85%" alt="Traefik Manager" />
</picture></a>
</p>
</div>
---
## Quick start
### Installer
```bash
curl -fsSL https://get-traefik.xyzlab.dev | bash
```
Installs the `tm` CLI and runs `tm install`. Six modes: Traefik + Traefik Manager together, Traefik Manager on its own (Docker or native), or the agent for a remote host (Docker, Docker + Traefik, or binary).
Afterwards `tm` manages the install: `tm status`, `tm update`, `tm logs`, `tm reconfigure`, `tm doctor`. [Full guide](https://traefik-manager.xyzlab.dev/tm-cli.html)
### Docker Compose
For an existing Traefik install.
```yaml
services:
traefik-manager:
image: ghcr.io/chr0nzz/traefik-manager:latest
container_name: traefik-manager
restart: unless-stopped
ports:
- "5000:5000"
environment:
- COOKIE_SECURE=false
volumes:
- /path/to/traefik/dynamic.yml:/app/config/dynamic.yml
- /path/to/traefik-manager/config:/app/config
- /path/to/traefik-manager/backups:/app/backups
```
Open **http://your-server:5000** and the setup wizard takes it from there.
---
## Features
**Routes** - HTTP, TCP and UDP. Multiple domains and backends per route, each with its own scheme including `h2c` for cleartext HTTP/2, sticky sessions, health checks, priority, per-route certificate resolvers, editable `tls.domains` and TLS profiles. Guided presets for security headers and media streaming.
**Services** - build a load balancer, weighted, mirroring or failover service on its own, or balance a route across a mix of raw addresses and existing services with a weight on each row. Services Traefik Manager did not write stay read only until you take them over, which records ownership without touching the file.
**Middlewares** - 30 wizards covering auth, rate limiting, headers, CORS, redirects, prefixes, error pages and TLS client certificates, plus a raw YAML editor and your own reusable templates.
**Dashboard and Route Map** - a homepage-style grid of your apps with icons and health, and a topology map from entry point through middlewares to backend, coloured per hop.
**Certificates** - every certificate in `acme.json`, with expiry, the ones no router serves, and the ones whose resolver is gone from your static config. Filter by domain or by either of those. Mount the file read-write and set a restart method to remove them, one at a time or in bulk, with a timestamped backup you can restore.
**Monitoring** - live router and service health from the Traefik API, provider tabs for Docker, Kubernetes, Swarm, Nomad, ECS, Consul, Redis and more, which switch themselves on the first time Traefik reports routers from them, and CVE advisories for your running Traefik version.
**Logs and CrowdSec** - access log analytics and CrowdSec attacks, bans and decisions. Optional country flags and a world map, resolved on your own server.
**Notifications** - nine destinations: Discord, Slack, ntfy, Gotify, Pushover, Pushbullet, Telegram, UnifiedPush and generic webhooks. Route events to each one by category and severity, with quiet hours, hourly or daily digests, and errors that break through anyway. Desktop notifications while a tab is open.
**Background monitoring** - the server checks your routes on a schedule and tells you when a backend goes down or a pool degrades, alongside certificate expiry, Traefik and agent reachability, CrowdSec activity, GeoIP freshness and new releases. Alerts arrive whether or not the interface is open.
**Static config editor** - edit `traefik.yml` from the UI and apply it with a one-click restart, via socket proxy, poison pill or direct socket.
**Plugins** - see every Traefik plugin with the middlewares using it, install new ones, and get flagged when the catalog has a newer version.
**Backups** - timestamped local backups before every change, plus git push with commit history, diffs and one-click restore.
**Multi-server** - a lightweight Go agent runs beside Traefik on any remote host, and every tab works against whichever server you pick. No VPN, no SSH.
**Security** - bcrypt, TOTP two-factor, OIDC single sign-on, per-device API keys, CSRF protection, rate limiting, and secrets encrypted at rest.
**Two layouts** - *Fluid* fills the screen, *Fixed* caps the width.
**Mobile** - a native Android app on Google Play, and the web app installs as a PWA on any platform.
Full [documentation](https://traefik-manager.xyzlab.dev/).
---
## Deployment
| Runtime | Guide |
| ----------------------------------------------------------------------------------------------------------------------| ---------------------------------------------------------------------------------------|
| <img src="https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/windows-terminal.png" width="20" height="20"> Installer | [Full stack, TM only, agent](https://traefik-manager.xyzlab.dev/tm-cli.html) |
| <img src="https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/docker.png" width="20" height="20"> Docker | [Compose, networking, behind Traefik](https://traefik-manager.xyzlab.dev/docker.html) |
| <img src="https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/podman.png" width="20" height="20"> Podman | [Rootless, Quadlet, SELinux](https://traefik-manager.xyzlab.dev/podman.html) |
| <img src="https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/linux.png" width="20" height="20"> Linux | [Native Python and systemd](https://traefik-manager.xyzlab.dev/linux.html) |
| <img src="https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/unraid.png" width="20" height="20"> Unraid | [Community Applications and appdata paths](https://traefik-manager.xyzlab.dev/unraid.html) |
| <img src="https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/umbrelos.png" width="20" height="20"> umbrelOS | [Community app store, ports and routing](https://traefik-manager.xyzlab.dev/umbrel.html) |
| <img src="docs/public/images/icon.png" width="20" height="20"> Agent | [TMA for multi-server management](https://traefik-manager.xyzlab.dev/agent.html) |
---
## Documentation
**[traefik-manager.xyzlab.dev](https://traefik-manager.xyzlab.dev/)**
[Overview](https://traefik-manager.xyzlab.dev/overview.html) ·
[Configuration](https://traefik-manager.xyzlab.dev/manager-yml.html) ·
[Environment variables](https://traefik-manager.xyzlab.dev/env-vars.html) ·
[Security](https://traefik-manager.xyzlab.dev/security.html) ·
[API](https://traefik-manager.xyzlab.dev/api.html) ·
[OIDC](https://traefik-manager.xyzlab.dev/oidc.html) ·
[Reset password](https://traefik-manager.xyzlab.dev/reset-password.html) ·
[Beta](https://traefik-manager.xyzlab.dev/beta.html)
Questions, help and release news: [Discord](https://discord.gg/vRQCMrrjtz)
---
## tm CLI
One binary that installs and manages the whole stack. Six install modes: Traefik and Traefik Manager together, Traefik Manager on its own (Docker or native), or an agent for a remote host (Docker, Docker + Traefik, or binary). Afterwards `tm status`, `tm update`, `tm logs`, `tm reconfigure`, `tm doctor` and `tm password reset` manage it in place.
[](https://github.com/chr0nzz/tm-cli)
[](https://github.com/chr0nzz/tm-cli/releases/latest)
[](https://github.com/chr0nzz/tm-cli/releases/latest)
```bash
curl -fsSL https://get-traefik.xyzlab.dev | bash
```
[Repository](https://github.com/chr0nzz/tm-cli) ·
[Releases](https://github.com/chr0nzz/tm-cli/releases/latest) ·
[Docs](https://traefik-manager.xyzlab.dev/tm-cli.html)
---
## Mobile app
Native Android (Kotlin and Jetpack Compose) and iOS (Swift and SwiftUI) apps for phones and tablets. Needs Traefik Manager v1.14.0 or newer and a per-device API key from **Settings - Authentication - API Keys**.
[](https://github.com/chr0nzz/traefik-manager-mobile)
[](https://play.google.com/store/apps/details?id=dev.chr0nzz.traefikmanager)
[](https://play.google.com/store/apps/details?id=dev.chr0nzz.traefikmanager)
[](https://apps.apple.com/us/app/traefik-manager/id6826725061)
[Repository](https://github.com/chr0nzz/traefik-manager-mobile) ·
[Releases](https://github.com/chr0nzz/traefik-manager-mobile/releases/latest) ·
[Docs](https://traefik-manager.xyzlab.dev/mobile.html)
---
## Built with
| Layer | Technology |
| --- | --- |
| Backend | Python 3.11 · Flask 3.1 · Gunicorn |
| Agent | Go 1.25 · Alpine |
| Config | ruamel.yaml, preserving comments and Go templates |
| Auth | bcrypt · pyotp · CSRF · Flask-Limiter · Fernet |
| Frontend | Vanilla JS · Tailwind 3.4 · Phosphor Icons · Monaco · Twemoji country flags (CC-BY 4.0) |
| Geolocation | maxminddb · DB-IP Lite, local lookups only |
| Tests | pytest · ruff · `go test`, on every pull request |
All JS and CSS is bundled at build time - nothing is fetched from a CDN at runtime.
---
## Translations
v1.15.0 is the first release that is not English-only. The whole interface is ready for translation - every page, dialog, tooltip, toast and server message - and the work happens on Weblate.
<a href="https://hosted.weblate.org/engage/traefik-manager/">
<img src="https://hosted.weblate.org/widget/traefik-manager/matrix-auto.svg" alt="Translation status per language" />
</a>
v1.15.0 ships in French, French (Canada), German, Spanish, Portuguese (Portugal), Portuguese (Brazil), Dutch, Chinese (Simplified), Russian, Czech and Danish, plus English spellings for the United States and the United Kingdom. Any other language is added on request.
| You want to | Where |
| --- | --- |
| Translate | [Weblate](https://hosted.weblate.org/projects/traefik-manager/web-app/) - an account is needed to write, not to read. Nothing goes live on its own: Weblate opens a pull request here |
| Review a language | [LANGUAGE-REVIEWERS.md](https://github.com/chr0nzz/tm-locale/blob/main/LANGUAGE-REVIEWERS.md) - one named reviewer per language, and a language ships once it has a reviewer or passes an agent verification |
| Ask for a language | [Open a language request](https://github.com/chr0nzz/tm-locale/issues/new?template=language-request.yml) |
| Read first | [Handbook](https://github.com/chr0nzz/tm-locale/blob/main/HANDBOOK.md) · [Glossary](https://github.com/chr0nzz/tm-locale/blob/main/GLOSSARY.md) · [Do not translate](https://github.com/chr0nzz/tm-locale/blob/main/DO-NOT-TRANSLATE.md) |
| Report a wrong translation | [Open a translation issue](https://github.com/chr0nzz/tm-locale/issues/new?template=translation-issue.yml) |
Traefik Manager deletes routers and rewrites live proxy configuration, so a mistranslated confirmation button is a destructive bug rather than a cosmetic one. Every translation is escaped when the page renders it, and CI rejects a translation that adds markup, links or control characters, or that changes a placeholder such as `{name}` or `%(name)s`.
---
## Contributing
Pull requests are welcome. See [CONTRIBUTING.md](CONTRIBUTING.md) for reporting bugs, suggesting features, and running the project locally.
### Contributors
<p align="center">
<a href="https://github.com/chr0nzz" title="chr0nzz (@chr0nzz) - creator and maintainer"><img src="https://images.weserv.nl/?url=github.com/chr0nzz.png&w=96&h=96&fit=cover&mask=circle" width="48" height="48" alt="chr0nzz"></a>
<a href="https://github.com/fbnlrz" title="Fabi (@fbnlrz) - client-IP feature set, guided route presets, config-safety fixes"><img src="https://images.weserv.nl/?url=github.com/fbnlrz.png&w=96&h=96&fit=cover&mask=circle" width="48" height="48" alt="fbnlrz"></a>
<a href="https://github.com/adrianrp1988" title="Adrian Rodriguez (@adrianrp1988) - TCP middlewares on TCP routes"><img src="https://images.weserv.nl/?url=github.com/adrianrp1988.png&w=96&h=96&fit=cover&mask=circle" width="48" height="48" alt="adrianrp1988"></a>
<a href="https://github.com/akanealw" title="@akanealw - Authelia forward-auth template fix"><img src="https://images.weserv.nl/?url=github.com/akanealw.png&w=96&h=96&fit=cover&mask=circle" width="48" height="48" alt="akanealw"></a>
<a href="https://github.com/maca134" title="@maca134 - horizontally resizable modals"><img src="https://images.weserv.nl/?url=github.com/maca134.png&w=96&h=96&fit=cover&mask=circle" width="48" height="48" alt="maca134"></a>
<a href="https://github.com/nofuturekid" title="Thomas Kroll (@nofuturekid) - route health check for Traefik internal routers"><img src="https://images.weserv.nl/?url=github.com/nofuturekid.png&w=96&h=96&fit=cover&mask=circle" width="48" height="48" alt="nofuturekid"></a>
<a href="https://github.com/slywalker01" title="@slywalker01 - French translation"><img src="https://images.weserv.nl/?url=github.com/slywalker01.png&w=96&h=96&fit=cover&mask=circle" width="48" height="48" alt="slywalker01"></a>
<a href="https://github.com/pouda" title="Romaric Worobel (@pouda) - French translation"><img src="https://images.weserv.nl/?url=github.com/pouda.png&w=96&h=96&fit=cover&mask=circle" width="48" height="48" alt="pouda"></a>
<a href="https://github.com/hxgoxo" title="Hugo HB BREY (@hxgoxo) - French translation"><img src="https://images.weserv.nl/?url=github.com/hxgoxo.png&w=96&h=96&fit=cover&mask=circle" width="48" height="48" alt="hxgoxo"></a>
<a href="https://github.com/vblogio" title="Cédric Quillévéré (@vblogio) - French translation"><img src="https://images.weserv.nl/?url=github.com/vblogio.png&w=96&h=96&fit=cover&mask=circle" width="48" height="48" alt="vblogio"></a>
<a href="https://github.com/Taikylah" title="@Taikylah - French translation"><img src="https://images.weserv.nl/?url=github.com/Taikylah.png&w=96&h=96&fit=cover&mask=circle" width="48" height="48" alt="Taikylah"></a>
<a href="https://github.com/TehoorMarjan" title="Tehoor Marjan (@TehoorMarjan) - French translation"><img src="https://images.weserv.nl/?url=github.com/TehoorMarjan.png&w=96&h=96&fit=cover&mask=circle" width="48" height="48" alt="TehoorMarjan"></a>
<a href="https://github.com/shrimphorticulturist" title="@shrimphorticulturist - French translation"><img src="https://images.weserv.nl/?url=github.com/shrimphorticulturist.png&w=96&h=96&fit=cover&mask=circle" width="48" height="48" alt="shrimphorticulturist"></a>
<a href="https://github.com/stilicho2011" title="@stilicho2011 - Russian translation"><img src="https://images.weserv.nl/?url=github.com/stilicho2011.png&w=96&h=96&fit=cover&mask=circle" width="48" height="48" alt="stilicho2011"></a>
<a href="https://github.com/stopspazzing" title="Jeremy Zimmerman (@stopspazzing) - keep http3 settings when saving an entry point"><img src="https://images.weserv.nl/?url=github.com/stopspazzing.png&w=96&h=96&fit=cover&mask=circle" width="48" height="48" alt="stopspazzing"></a>
<a href="https://github.com/WhiPaper" title="Heejong Jo (@WhiPaper) - Korean translation"><img src="https://images.weserv.nl/?url=github.com/WhiPaper.png&w=96&h=96&fit=cover&mask=circle" width="48" height="48" alt="WhiPaper"></a>
</p>
Thanks as well to everyone who has opened an issue or a discussion - several features started as a question from someone running into something unexpected.
## Stats
<div align="center">
<picture>
<source media="(prefers-color-scheme: dark)" srcset="https://raw.githubusercontent.com/chr0nzz/chr0nzz/main/profile/star-history-traefik-manager-dark.svg" />
<source media="(prefers-color-scheme: light)" srcset="https://raw.githubusercontent.com/chr0nzz/chr0nzz/main/profile/star-history-traefik-manager-light.svg" />
<img src="https://raw.githubusercontent.com/chr0nzz/chr0nzz/main/profile/star-history-traefik-manager-dark.svg" alt="star history" />
</picture>
<p align="center">
<a href="https://www.star-history.com/chr0nzz/traefik-manager">
<picture><source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/badge?repo=chr0nzz/traefik-manager&type=rank&theme=dark" /><source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/badge?repo=chr0nzz/traefik-manager&type=rank" /><img alt="Star History Rank" src="https://api.star-history.com/badge?repo=chr0nzz/traefik-manager&type=rank" /></picture> <picture><source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/badge?repo=chr0nzz/traefik-manager&type=trending&theme=dark" /><source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/badge?repo=chr0nzz/traefik-manager&type=trending" /><img alt="GitHub Trending Repository of the Day" src="https://api.star-history.com/badge?repo=chr0nzz/traefik-manager&type=trending" /></picture>
</a>
</p>
</div>
## License
[GPL-3.0](LICENSE)