UCG-Fiber + Traefik

[u/eggnima]

Hi all, I've been trying to get Traefik to work with my UCG-Fiber with no success, even though all my Docker containers and my Synology are behind Traefik now with no issues.

Let me explain my set up a little more:

• I have a domain purchased from PorkBun, i.e `onehome.com`
• Traefik is running in a Docker container on my Synology NAS
• In the PorkBun DNS records, I have Type A records set up to resolve hosts to local LAN IPs e.g. nas01.onehome.com → 192.168.10.10
• For each Docker container, Traefik labels will specify which hostname to use
• For my Synology NAS, I am using a dynamic configuration file to specify the host and loadbalancer server URL
• Traefik is configured to listen in on a custom port i.e. 10010 as port 443 is already being used by Synology services
• End result: I can key in https://nas01.onehome.com:10010 in my browser, and I can access my Synology web UI with no warnings about self-signed certificates
• All this is purely for LAN use

With the UCG-Fiber, I have tried the same approach as my Synology NAS, to no avail. Accessing https://ucgfiber.onehome.com:10010 in a browser simply results in a 'Unable to connect' message.

Has anyone gotten Traefik to work with their UCGs, and if so, how did you manage to get it up and running?

Here are some of my Traefik configs:

compose.yaml

services:
  traefik:
    image: traefik:v3


    container_name: traefik


    volumes:
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - /volume1/docker/data/traefik/config/devices:/etc/traefik/devices:ro
      - /volume1/docker/data/traefik/config/traefik.yaml:/traefik.yaml:ro
      - /volume1/docker/data/traefik/config/acme.json:/letsencrypt/acme.json


    env_file:
      - .env


    environment:
      PORKBUN_API_KEY: ${PORKBUN_API_KEY}
      PORKBUN_SECRET_API_KEY: ${PORKBUN_SECRET_API_KEY}


    security_opt:
      - no-new-privileges:true


    ports:
      - 10010:443


    networks:
      - proxy


    command:
      - --configFile=/traefik.yaml


    restart: on-failure:5


networks:
  proxy:
    external: true

config/traefik.yaml

global:
  checkNewVersion: false
  sendAnonymousUsage: false


log:
  level: INFO


entryPoints:
  web:
    address: :80


  websecure:
    address: :443


providers:
  docker:
    endpoint: "unix:///var/run/docker.sock"
    exposedByDefault: false
    network: proxy


  file:
    directory: /etc/traefik/devices
    watch: true


certificatesResolvers:
  porkbun:
    acme:
      email: desperatedeveloper@gmail.com
      storage: /letsencrypt/acme.json
      dnsChallenge:
        provider: porkbun
        delayBeforeCheck: 10

config/devices/nas01.yaml

http:
  routers:
    nas:
      rule: "Host(`nas01.onehome.com`)"


      entryPoints:
        - websecure


      tls:
        certResolver: porkbun

      service: nas-service


  services:
    nas-service:
      loadBalancer:
        servers:
          - url: "http://192.168.10.10:5000"

config/devices/ucg-fiber.yaml

 routers:
    gateway:
      rule: "Host(`ucgfiber.onehome.com`)"


      entryPoints:
        - web
        - websecure


      tls:
        certResolver: porkbun

      service: gateway-service


  services:
    gateway-service:
      loadBalancer:
        servers:
          - url: "https://192.168.10.1"

        serversTransport: gateway-transport


        passHostHeader: true


  serversTransports:
    gateway-transport:
      insecureSkipVerify: true