edit: please see this post for most recent deployment instructions Here's a docker-compose.yml file to deploy Node-RED and Traefik, a reverse proxy that automates fetching, issuing, and renewing free SSL certificates from Let's Encrypt. There are two ways Lets Encrypt verifies that you are the own…

Excellent, it is all working now. One minor points, the oauth service has restart: always, it should be using restart_policy. Should it be set to on-failure as for node-red or left at default (which is any I think) as for traefik? Also one issue, which may be normal behaviour, with the logs on de…

That's normal, just set it to INFO.

[image] Colin: level=debug msg="Network not found, Great, thanks. Mosquitto next, plus working out how to git clone into the node-red container as it is built.

[image] Colin: Mosquitto next, I am struggling here, I can't work out how to get Traefik to route mqtt to mosquitto, and can't find anything in the docs to help. @VinistoisR , you mentioned mqtt earlier in the thread, have you used Traefik for this or is your mqtt not exposed to the internet? …

I use vernemq through traefik. Tcp routers are new in traefik, you'll need to get familiar with the docs.

OK, thanks. So much to learn, so little time for learning. I will report back if I achieve success.

The reason I use VerneMQ is it gives me zero trouble doing mqtt over wss (secure websocket) via traefik. It's the most basic config - just copy the labels from the nodered service and change all the "nodered" into "mqtt", and you'll be able to make websocket connection to: wss://mqtt.yourdomain.co…

Do I put 1883 in "traefik.http.services.mqtt.loadbalancer.server.port=1883"?

No, you can't mqtt into an http port. Traefik http routers can only shuttle packets from http(s) entry points to http(s) backends. Mqtt is a TCP protocol, so you either need to use a TCP router, or publish the mqtt port (1883) and bypass traefik for mqtt connections. If you use VerneMQ or another…

I have got it working with vernemq and wss with some additional input from the second post on the link below, obviously posted by a very knowledgeable and helpful guy :slight_smile: There are a couple of small issues that I might need to come back on but it is basically working. https://gist.githu…

Node-RED

Node-RED Forum

Node-RED SSL reverse proxy w/ Google Oauth

Share Your Projects

Colin 6 May 2020 07:54 79

That works, thanks.

Traefik and Docker : Proxy the Dashboard as site sub-path

Topic		Replies	Views
[ANNOUNCE] node-red-contrib-letsencrypt : beta version Share Your Nodes	64	4505	4 June 2020
Securing Node-Red General security	33	8667	24 December 2023
Safely accessing Node-RED over the Internet FAQs security	20	7373	18 May 2023
Node-red-contrib-letsencrypt General security	34	1009	23 August 2024
Node-RED SSL using Letsencrypt & Certbot Share Your Projects security	52	22015	9 May 2021

Copyright OpenJS Foundation and Node-RED contributors. All rights reserved. The OpenJS Foundation has registered trademarks and uses trademarks. For a list of trademarks of the OpenJS Foundation, please see our Trademark Policy and Trademark List. Trademarks and logos not indicated on the list of OpenJS Foundation trademarks are trademarks™ or registered® trademarks of their respective holders. Use of them does not imply any affiliation with or endorsement by them.

Node-RED SSL reverse proxy w/ Google Oauth

Related topics