traefik

Deploy the Traefik reverse proxy as a Podman quadlet.

giftpilz0.container47 variables

Usage

playbook.yml

- hosts: all
  roles:
    - role: giftpilz0.container.traefik

Variables

• podman_userstr

  System user for rootless podman operations.

  Default{{ ansible_user }}
• traefik_imagestr

  Image name without tag.

  Defaultdocker.io/library/traefik
• traefik_versionstr

  Container image version.

  Defaultv3.7.16
• traefik_autoupdatebool

  Enable podman auto-update for this container.

  Defaulttrue
• traefik_network_enabledbool

  Create and manage the podman network.

  Defaulttrue
• traefik_network_namestr

  Podman network name.

  Defaulttraefik-internal
• traefik_network_driverstr

  Podman network driver.

  Defaultbridge
• traefik_networkslist[str]

  Additional podman networks to join (by role name).

  Default[]
• traefik_bind_ipstr

  Host IP to bind exposed ports to.

  Default{{ ansible_facts['default_ipv4']['address'] }}
• traefik_acme_enabledbool

  Enable ACME/Let's Encrypt certificates.

  Defaulttrue
• traefik_acme_emailstr

  ACME account email.

  Default""
• traefik_acme_ca_serverstr

  ACME CA server URL.

  Defaulthttps://acme-v02.api.letsencrypt.org/directory
• traefik_acme_challenge_typestr

  ACME challenge type (dns, http, or tls).

  Defaulthttp
• traefik_acme_dns_providerstr

  DNS provider for DNS challenge.

  Defaultcloudflare
• traefik_acme_dns_resolverslist[str]

  Custom DNS resolvers for DNS challenge.

  Default[]
• traefik_acme_eab_enabledbool

  Enable external account binding for ACME.

  Defaultfalse
• traefik_acme_eab_kidstr

  ACME EAB key ID.

  Default""
• traefik_acme_eab_hmacstr

  ACME EAB HMAC key.

  Default""
• traefik_http_internal_portint

  Internal HTTP entrypoint port.

  Default80
• traefik_https_internal_portint

  Internal HTTPS entrypoint port.

  Default443
• traefik_http_redirect_httpsbool

  Redirect HTTP to HTTPS.

  Defaulttrue
• traefik_http3_enabledbool

  Enable HTTP/3 (QUIC).

  Defaulttrue
• traefik_http3_advertised_portint

  HTTP/3 advertised port.

  Default443
• traefik_tcp_entrypointslist[dict]

  TCP entrypoint definitions.

  Default[]
• traefik_log_levelstr

  Traefik log level.

  DefaultWARN
• traefik_log_formatstr

  Traefik log format.

  Defaultjson
• traefik_access_log_formatstr

  Access log format.

  Defaultjson
• traefik_access_log_buffer_sizeint

  Access log channel buffer size.

  Default10
• traefik_metrics_enabledbool

  Enable Prometheus metrics endpoint.

  Defaulttrue
• traefik_metrics_internal_portint

  Prometheus metrics port inside the container.

  Default8082
• traefik_metrics_bind_ipstr

  Bind IP for metrics endpoint.

  Default127.0.0.1
• traefik_ping_internal_portint

  Port of the ping endpoint used by the health check, bound to 127.0.0.1.

  Default8081
• traefik_transport_timeouts_enabledbool

  Enable custom transport timeouts.

  Defaultfalse
• traefik_transport_read_timeoutstr

  Transport read timeout (e.g. 12h).

  Default12h
• traefik_transport_write_timeoutstr

  Transport write timeout (e.g. 12h).

  Default12h
• traefik_transport_idle_timeoutstr

  Transport idle timeout (e.g. 3m).

  Default3m
• traefik_pluginsdict

  Experimental Traefik plugin definitions keyed by plugin name.

  Default{}
• traefik_middlewares_redirectdict

  Redirect middleware definitions (path/regex-based).

  Default{}
• traefik_custom_middlewaresdict

  Custom traefik middleware definitions.

  Default{}
• traefik_http_serviceslist[dict]

  HTTP service/router definitions.

  Default[]
• traefik_http_service_defaultsdict

  Values for keys missing in traefik_http_services entries.

  Default

  entrypoints:
  - websecure
  middlewares: []
  tls_enabled: false
  acme_enabled: '{{ traefik_acme_enabled }}'
  large_downloads: false
  insecure_skip_verify: false

• traefik_tcp_serviceslist[dict]

  TCP service/router definitions.

  Default[]
• traefik_tcp_service_defaultsdict

  Values for keys missing in traefik_tcp_services entries.

  Default

  tls_enabled: false
  acme_enabled: false
  tls_passthrough: false

• traefik_environment_varsdict

  Extra environment variables for the container.

  Default{}
• traefik_entrypointstr

  Optional container entrypoint override.

  Default""
• traefik_extra_fileslist[dict]

  Arbitrary file entries with src (controller path) or source (target path), dest, optional mount, mode, and template.

  Default[]
• traefik_extra_dirslist[dict]

  Arbitrary directory entries with src (controller directory) or source (target path), dest, optional mount and mode.

  Default[]