Traefik

Reverse-Proxy & Load-Balancer der NeXifyAI-Plattform. Routet alle externen Anfragen mit SSL-Terminierung.

Key Facts

• Version: 3.7.7
• Config: /opt/nexifyai/traefik/traefik.yml (static), dynamic.yml (Router/Services)
• SSL: Let's Encrypt via certResolver
• Dashboard: Port 8080 (internal only)

Subdomains (aktiv)

| Subdomain | Service | |---|---| | admin.nexifyai.cloud | Portal (:8880) + Pfad-Routing | | demo.nexifyai.cloud | Vitrine (:8901) | | wissen.nexifyai.cloud | LightRAG (:9621) | | rag.nexifyai.cloud | LightRAG (Alias) |

Middlewares

• security-headers — CSP, HSTS, X-Frame-Options
• rate-limit — Request-Rate-Limiting
• auth-forward — Authentifizierungs-Weiterleitung
• csp-strict / csp-iframe — Content-Security-Policy

Beziehungen

• [[portal]] — Hauptservice
• [[auth-service]] — Auth-Forward
• [[9router]] — Router-Dashboard
• Alle Services laufen hinter Traefik

Quellen

• raw/articles/traefik-dynamic-config.md
• raw/articles/traefik-static-config.md