# Traefik Manager **A clean, self-hosted web UI for your Traefik reverse proxy.** Routes, middlewares, Services, Plugins, certificates, crowdsec and logs, without editing YAML by hand. [![Version](https://img.shields.io/github/v/release/chr0nzz/traefik-manager)](https://github.com/chr0nzz/traefik-manager/releases) [![Build](https://img.shields.io/github/actions/workflow/status/chr0nzz/traefik-manager/docker.yml?logo=githubactions&logoColor=white&label=build)](https://github.com/chr0nzz/traefik-manager/actions/workflows/docker.yml) [![Tests](https://img.shields.io/github/actions/workflow/status/chr0nzz/traefik-manager/tests.yml?branch=dev&logo=githubactions&logoColor=white&label=tests)](https://github.com/chr0nzz/traefik-manager/actions/workflows/tests.yml) [![Docker Image](https://img.shields.io/badge/ghcr.io-chr0nzz%2Ftraefik--manager-blue?logo=docker&logoColor=white)](https://github.com/chr0nzz/traefik-manager/pkgs/container/traefik-manager) [![License](https://img.shields.io/badge/license-GPL--3.0-blue)](LICENSE) [![Docs](https://img.shields.io/badge/docs-xyzlab.dev-blue)](https://traefik-manager.xyzlab.dev/) [![Stars](https://img.shields.io/github/stars/chr0nzz/traefik-manager?logo=github&color=e3b341)](https://github.com/chr0nzz/traefik-manager/stargazers) [![Issues](https://img.shields.io/github/issues/chr0nzz/traefik-manager?logo=github)](https://github.com/chr0nzz/traefik-manager/issues) [![Discord](https://img.shields.io/badge/Discord-join-5865F2?logo=discord&logoColor=white)](https://discord.gg/vRQCMrrjtz) [![Ko-fi](https://img.shields.io/badge/Ko--fi-Sponsor-ff5f5f?logo=ko-fi&logoColor=white)](https://ko-fi.com/chr0nzz) [![Translation status](https://hosted.weblate.org/widget/traefik-manager/svg-badge.svg)](https://hosted.weblate.org/engage/traefik-manager/) _{Built for homelabbers who love Traefik but hate editing YAML at 2am.}

--- ## Quick start ### Installer ```bash curl -fsSL https://get-traefik.xyzlab.dev | bash ``` Installs the `tm` CLI and runs `tm install`. Six modes: Traefik + Traefik Manager together, Traefik Manager on its own (Docker or native), or the agent for a remote host (Docker, Docker + Traefik, or binary). Afterwards `tm` manages the install: `tm status`, `tm update`, `tm logs`, `tm reconfigure`, `tm doctor`. [Full guide](https://traefik-manager.xyzlab.dev/tm-cli.html) ### Docker Compose For an existing Traefik install. ```yaml services: traefik-manager: image: ghcr.io/chr0nzz/traefik-manager:latest container_name: traefik-manager restart: unless-stopped ports: - "5000:5000" environment: - COOKIE_SECURE=false volumes: - /path/to/traefik/dynamic.yml:/app/config/dynamic.yml - /path/to/traefik-manager/config:/app/config - /path/to/traefik-manager/backups:/app/backups ``` Open **http://your-server:5000** and the setup wizard takes it from there. --- ## Features **Routes** - HTTP, TCP and UDP. Multiple domains and backends per route, each with its own scheme including `h2c` for cleartext HTTP/2, sticky sessions, health checks, priority, per-route certificate resolvers, editable `tls.domains` and TLS profiles. Guided presets for security headers and media streaming. **Services** - build a load balancer, weighted, mirroring or failover service on its own, or balance a route across a mix of raw addresses and existing services with a weight on each row. Services Traefik Manager did not write stay read only until you take them over, which records ownership without touching the file. **Middlewares** - 30 wizards covering auth, rate limiting, headers, CORS, redirects, prefixes, error pages and TLS client certificates, plus a raw YAML editor and your own reusable templates. **Dashboard and Route Map** - a homepage-style grid of your apps with icons and health, and a topology map from entry point through middlewares to backend, coloured per hop. **Certificates** - every certificate in `acme.json`, with expiry, the ones no router serves, and the ones whose resolver is gone from your static config. Filter by domain or by either of those. Mount the file read-write and set a restart method to remove them, one at a time or in bulk, with a timestamped backup you can restore. **Monitoring** - live router and service health from the Traefik API, provider tabs for Docker, Kubernetes, Swarm, Nomad, ECS, Consul, Redis and more, which switch themselves on the first time Traefik reports routers from them, and CVE advisories for your running Traefik version. **Logs and CrowdSec** - access log analytics and CrowdSec attacks, bans and decisions. Optional country flags and a world map, resolved on your own server. **Notifications** - nine destinations: Discord, Slack, ntfy, Gotify, Pushover, Pushbullet, Telegram, UnifiedPush and generic webhooks. Route events to each one by category and severity, with quiet hours, hourly or daily digests, and errors that break through anyway. Desktop notifications while a tab is open. **Background monitoring** - the server checks your routes on a schedule and tells you when a backend goes down or a pool degrades, alongside certificate expiry, Traefik and agent reachability, CrowdSec activity, GeoIP freshness and new releases. Alerts arrive whether or not the interface is open. **Static config editor** - edit `traefik.yml` from the UI and apply it with a one-click restart, via socket proxy, poison pill or direct socket. **Plugins** - see every Traefik plugin with the middlewares using it, install new ones, and get flagged when the catalog has a newer version. **Backups** - timestamped local backups before every change, plus git push with commit history, diffs and one-click restore. **Multi-server** - a lightweight Go agent runs beside Traefik on any remote host, and every tab works against whichever server you pick. No VPN, no SSH. **Security** - bcrypt, TOTP two-factor, OIDC single sign-on, per-device API keys, CSRF protection, rate limiting, and secrets encrypted at rest. **Two layouts** - *Fluid* fills the screen, *Fixed* caps the width. **Mobile** - a native Android app on Google Play, and the web app installs as a PWA on any platform. Full [documentation](https://traefik-manager.xyzlab.dev/). --- ## Deployment | Runtime | Guide | | ----------------------------------------------------------------------------------------------------------------------| ---------------------------------------------------------------------------------------| |

Installer | [Full stack, TM only, agent](https://traefik-manager.xyzlab.dev/tm-cli.html) | |

Docker | [Compose, networking, behind Traefik](https://traefik-manager.xyzlab.dev/docker.html) | |

Podman | [Rootless, Quadlet, SELinux](https://traefik-manager.xyzlab.dev/podman.html) | |

Linux | [Native Python and systemd](https://traefik-manager.xyzlab.dev/linux.html) | |

Unraid | [Community Applications and appdata paths](https://traefik-manager.xyzlab.dev/unraid.html) | |

umbrelOS | [Community app store, ports and routing](https://traefik-manager.xyzlab.dev/umbrel.html) | |

Agent | [TMA for multi-server management](https://traefik-manager.xyzlab.dev/agent.html) | --- ## Documentation **[traefik-manager.xyzlab.dev](https://traefik-manager.xyzlab.dev/)** [Overview](https://traefik-manager.xyzlab.dev/overview.html) · [Configuration](https://traefik-manager.xyzlab.dev/manager-yml.html) · [Environment variables](https://traefik-manager.xyzlab.dev/env-vars.html) · [Security](https://traefik-manager.xyzlab.dev/security.html) · [API](https://traefik-manager.xyzlab.dev/api.html) · [OIDC](https://traefik-manager.xyzlab.dev/oidc.html) · [Reset password](https://traefik-manager.xyzlab.dev/reset-password.html) · [Beta](https://traefik-manager.xyzlab.dev/beta.html) Questions, help and release news: [Discord](https://discord.gg/vRQCMrrjtz) --- ## tm CLI One binary that installs and manages the whole stack. Six install modes: Traefik and Traefik Manager together, Traefik Manager on its own (Docker or native), or an agent for a remote host (Docker, Docker + Traefik, or binary). Afterwards `tm status`, `tm update`, `tm logs`, `tm reconfigure`, `tm doctor` and `tm password reset` manage it in place. [![tm CLI](https://img.shields.io/badge/tm-repo-green?logo=go&logoColor=white)](https://github.com/chr0nzz/tm-cli) [![Release](https://img.shields.io/github/v/release/chr0nzz/tm-cli?logo=github&logoColor=white)](https://github.com/chr0nzz/tm-cli/releases/latest) [![Platforms](https://img.shields.io/badge/linux-amd64_%7C_arm64-blue?logo=linux&logoColor=white)](https://github.com/chr0nzz/tm-cli/releases/latest) ```bash curl -fsSL https://get-traefik.xyzlab.dev | bash ``` [Repository](https://github.com/chr0nzz/tm-cli) · [Releases](https://github.com/chr0nzz/tm-cli/releases/latest) · [Docs](https://traefik-manager.xyzlab.dev/tm-cli.html) --- ## Mobile app Native Android (Kotlin and Jetpack Compose) and iOS (Swift and SwiftUI) apps for phones and tablets. Needs Traefik Manager v1.14.0 or newer and a per-device API key from **Settings - Authentication - API Keys**. [![Mobile App](https://img.shields.io/badge/mobile-repo-green?logo=android&logoColor=white)](https://github.com/chr0nzz/traefik-manager-mobile) [![Google Play](https://img.shields.io/badge/Google_Play-Available-blue?logo=google-play&logoColor=white)](https://play.google.com/store/apps/details?id=dev.chr0nzz.traefikmanager) [![Play Downloads](https://playbadges.pavi2410.me/badge/downloads?id=dev.chr0nzz.traefikmanager)](https://play.google.com/store/apps/details?id=dev.chr0nzz.traefikmanager) [![App Store](https://img.shields.io/badge/App_Store-Available-blue?logo=apple&logoColor=white)](https://apps.apple.com/us/app/traefik-manager/id6826725061) [Repository](https://github.com/chr0nzz/traefik-manager-mobile) · [Releases](https://github.com/chr0nzz/traefik-manager-mobile/releases/latest) · [Docs](https://traefik-manager.xyzlab.dev/mobile.html) --- ## Built with | Layer | Technology | | --- | --- | | Backend | Python 3.11 · Flask 3.1 · Gunicorn | | Agent | Go 1.25 · Alpine | | Config | ruamel.yaml, preserving comments and Go templates | | Auth | bcrypt · pyotp · CSRF · Flask-Limiter · Fernet | | Frontend | Vanilla JS · Tailwind 3.4 · Phosphor Icons · Monaco · Twemoji country flags (CC-BY 4.0) | | Geolocation | maxminddb · DB-IP Lite, local lookups only | | Tests | pytest · ruff · `go test`, on every pull request | All JS and CSS is bundled at build time - nothing is fetched from a CDN at runtime. --- ## Translations v1.15.0 is the first release that is not English-only. The whole interface is ready for translation - every page, dialog, tooltip, toast and server message - and the work happens on Weblate.

v1.15.0 ships in French, French (Canada), German, Spanish, Portuguese (Portugal), Portuguese (Brazil), Dutch, Chinese (Simplified), Russian, Czech and Danish, plus English spellings for the United States and the United Kingdom. Any other language is added on request. | You want to | Where | | --- | --- | | Translate | [Weblate](https://hosted.weblate.org/projects/traefik-manager/web-app/) - an account is needed to write, not to read. Nothing goes live on its own: Weblate opens a pull request here | | Review a language | [LANGUAGE-REVIEWERS.md](https://github.com/chr0nzz/tm-locale/blob/main/LANGUAGE-REVIEWERS.md) - one named reviewer per language, and a language ships once it has a reviewer or passes an agent verification | | Ask for a language | [Open a language request](https://github.com/chr0nzz/tm-locale/issues/new?template=language-request.yml) | | Read first | [Handbook](https://github.com/chr0nzz/tm-locale/blob/main/HANDBOOK.md) · [Glossary](https://github.com/chr0nzz/tm-locale/blob/main/GLOSSARY.md) · [Do not translate](https://github.com/chr0nzz/tm-locale/blob/main/DO-NOT-TRANSLATE.md) | | Report a wrong translation | [Open a translation issue](https://github.com/chr0nzz/tm-locale/issues/new?template=translation-issue.yml) | Traefik Manager deletes routers and rewrites live proxy configuration, so a mistranslated confirmation button is a destructive bug rather than a cosmetic one. Every translation is escaped when the page renders it, and CI rejects a translation that adds markup, links or control characters, or that changes a placeholder such as `{name}` or `%(name)s`. --- ## Contributing Pull requests are welcome. See [CONTRIBUTING.md](CONTRIBUTING.md) for reporting bugs, suggesting features, and running the project locally. ### Contributors

Thanks as well to everyone who has opened an issue or a discussion - several features started as a question from someone running into something unexpected. ## Stats

## License [GPL-3.0](LICENSE)