Enabling under Traefik example?

[davekeeshan]

Is there an example of plane running under traefik.

I have a cloud server up and running with a wordpress instance and a few other small services already working. I want to add plane to this list.

I can start plane from docker compose (outside the setup.sh script) and it works is I ssh in and port forward to localhost.

However when I try and get plane to run under a subdomain i have if doesn't work. I do get some landing page, but it is just a spinning wheel. So far I have commented out the proxy part of the docker-compose.yml file and added these lines:

networks:
  traefik:
    external: true

And, which ${PLANE_DOMAIN} is an environment variable:

networks:
  - traefik
labels:
  # The labels are usefull for Traefik only
  - "traefik.enable=true"
  - "traefik.docker.network=traefik"
  # Get the routes from http
  - traefik.http.routers.plane.rule=Host(`${PLANE_DOMAIN}`)
  - "traefik.http.routers.plane.entrypoints=web"
  # Redirect these routes to https
  - "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
  - "traefik.http.routers.plane.middlewares=redirect-to-https@docker"
  # Get the routes from https
  - traefik.http.routers.plane-secured.rule=Host(`${PLANE_DOMAIN}`)
  - "traefik.http.routers.plane-secured.entrypoints=web-secure"
  # Apply autentificiation with http challenge
  - "traefik.http.routers.plane-secured.tls=true"
  - "traefik.http.routers.plane-secured.tls.certresolver=myhttpchallenge"

This works in other micro services, but not here, what am I missing?

Have have also set

WEB_URL, CORS_ALLOWED_ORIGINS, NEXT_PUBLIC_DEPLOY_URL in the .env script to reflect my subdomain path

[davekeeshan]

I am not too sure if anyone has looked at this, but i think you need to enable api as well as web.

However I think I have run into problems now due to strict-origin-when-cross-origin errors, traefik needs to be setup for CORS.

Anyway I am stuck here now, but I think i have pushed the problem up the hill a little bit.

[mguptahub]

Hello @davekeeshan

Check the sample docker compose with traefix implementation. traefik.sample.yaml.txt

This can give you a start in terms of service & the ports required.

[davekeeshan]

@mguptahub That is interesting, there were more things to set than I realised.

However it does not work for me, one is that I want it to be working for a domain name, not localhost (not much point putting it behind traefik). I think I made the required changes, but it still hangs, and i think it is CORS related:

[davekeeshan]

@mguptahub bump!

Does anybody check these forums or is discord where all the work happens?

[vansergen]

You can try the following setup to make it work with an external domain (https://plane.example.com)

• compose.yaml

services:
  traefik:
    image: traefik:v3.0
    restart: unless-stopped
    container_name: traefik
    ports:
      - 80:80
      - 443:443
    volumes:
      - letsencrypt:/letsencrypt
      - ./traefik/:/etc/traefik/
    networks:
      - web

  postgresql:
    image: postgres:16-alpine
    restart: unless-stopped
    container_name: postgresql
    env_file:
      - plane.env
    volumes:
      - postgresql:/var/lib/postgresql/data
    networks:
      - local

  redis:
    image: redis:7-alpine
    restart: unless-stopped
    container_name: redis
    volumes:
      - redis:/data
    networks:
      - local

  minio:
    image: quay.io/minio/minio
    restart: unless-stopped
    command: server /data --console-address ":9090"
    env_file:
      - plane.env
    container_name: minio
    volumes:
      - minio:/data
    networks:
      - web
      - local

  plane-frontend:
    image: makeplane/plane-frontend:latest
    container_name: plane-frontend
    pull_policy: always
    restart: unless-stopped
    env_file:
      - plane.env
    command: /usr/local/bin/start.sh web/server.js web
    depends_on:
      - plane-backend
      - plane-worker
    networks:
      - web

  plane-space:
    image: makeplane/plane-space:latest
    container_name: plane-space
    pull_policy: always
    restart: unless-stopped
    env_file:
      - plane.env
    command: /usr/local/bin/start.sh space/server.js space
    depends_on:
      - plane-backend
      - plane-worker
      - plane-frontend
    networks:
      - web
      - local

  plane-backend:
    image: makeplane/plane-backend:latest
    container_name: plane-backend
    pull_policy: always
    restart: unless-stopped
    env_file:
      - plane.env
    command: ./bin/takeoff
    depends_on:
      - postgresql
      - redis
    networks:
      - web
      - local

  plane-worker:
    image: makeplane/plane-backend:latest
    container_name: plane-worker
    pull_policy: always
    restart: unless-stopped
    env_file:
      - plane.env
    command: ./bin/worker
    depends_on:
      - plane-backend
      - postgresql
      - redis
    networks:
      - local

  plane-beat-worker:
    image: makeplane/plane-backend:latest
    container_name: plane-beat-worker
    pull_policy: always
    restart: unless-stopped
    env_file:
      - plane.env
    command: ./bin/beat
    depends_on:
      - plane-backend
      - postgresql
      - redis
    networks:
      - local

  plane-migrator:
    image: makeplane/plane-backend:latest
    container_name: plane-migrator
    pull_policy: always
    restart: no
    env_file:
      - plane.env
    command: >
      sh -c "python manage.py wait_for_db &&
           python manage.py migrate"
    depends_on:
      - postgresql
      - redis
    networks:
      - local

networks:
  web:
  local:

volumes:
  letsencrypt:
  postgresql:
  redis:
  minio:

• plane.env

# APP_RELEASE=latest
# WEB_REPLICAS=1
# SPACE_REPLICAS=1
# API_REPLICAS=1
WEB_URL=https://plane.example.com
DEBUG=1
NEXT_PUBLIC_DEPLOY_URL=https://plane.example.com/spaces
#SENTRY_DSN=
#SENTRY_ENVIRONMENT=production
#GOOGLE_CLIENT_ID=
#GITHUB_CLIENT_ID=
GITHUB_CLIENT_SECRET=
DOCKERIZED=1 # deprecated
CORS_ALLOWED_ORIGINS=https://plane.example.com

#DB SETTINGS
PGHOST=postgresql
PGDATABASE=plane
POSTGRES_USER=<USERNAME>
POSTGRES_PASSWORD=<PASSWORD>
POSTGRES_DB=plane
DATABASE_URL=postgresql://${POSTGRES_USER}:${POSTGRES_PASSWORD}@${PGHOST}/${PGDATABASE}

# REDIS SETTINGS
REDIS_HOST=redis
REDIS_PORT=6379
REDIS_URL=redis://${REDIS_HOST}:${REDIS_PORT}/

# EMAIL SETTINGS
EMAIL_HOST=smtp.gmail.com
EMAIL_HOST_USER=<EMAIL>
EMAIL_HOST_PASSWORD=<PASSWORD>
EMAIL_PORT=587
EMAIL_FROM=no-reply
EMAIL_USE_TLS=1
EMAIL_USE_SSL=0

# LOGIN/SIGNUP SETTINGS
ENABLE_SIGNUP=1
ENABLE_EMAIL_PASSWORD=1
ENABLE_MAGIC_LINK_LOGIN=0
SECRET_KEY=<SUPER_SECRET_KEY>

# DATA STORE SETTINGS
USE_MINIO=1
AWS_REGION=
#AWS_ACCESS_KEY_ID=<MINIO_USER>
#AWS_SECRET_ACCESS_KEY=<MINIO_PASSWORD>
AWS_S3_ENDPOINT_URL=http://minio:9000
AWS_S3_BUCKET_NAME=plane
MINIO_ROOT_USER=<MINIO_USER>
MINIO_ROOT_PASSWORD=<MINIO_PASSWORD>
BUCKET_NAME=plane
FILE_SIZE_LIMIT=5242880

# Gunicorn Workers
GUNICORN_WORKERS=2

• traefik/traefik.yaml

entryPoints:
  web:
    address: :80
    http:
      redirections:
        entryPoint:
          to: websecure
          scheme: https
  websecure:
    address: :443

certificatesresolvers:
  http_resolver:
    acme:
      httpchallenge:
        entrypoint: web
      email: <YOUR_EMAIL>
      storage: /letsencrypt/acme.json

providers:
  file:
    directory: /etc/traefik/dynamic
    watch: true

• traefik/dynamic/plane.yaml

http:
  routers:
    plane-space:
      rule: Host(`plane.example.com`) && PathPrefix(`/spaces/`)
      entrypoints:
        - websecure
      service: plane-space
      tls:
        certresolver: http_resolver

    plane-backend:
      rule: Host(`plane.example.com`) && PathPrefix(`/api/`)
      entrypoints:
        - websecure
      service: plane-backend
      tls:
        certresolver: http_resolver

    plane-uploads:
      rule: Host(`plane.example.com`) && PathPrefix(`/plane/`)
      entrypoints:
        - websecure
      service: plane-uploads
      tls:
        certresolver: http_resolver

    plane-frontend:
      rule: Host(`plane.example.com`)
      entrypoints:
        - websecure
      service: plane-frontend
      tls:
        certresolver: http_resolver

  services:
    plane-frontend:
      loadbalancer:
        servers:
          - url: http://plane-frontend:3000

    plane-backend:
      loadbalancer:
        servers:
          - url: http://plane-backend:8000

    plane-space:
      loadbalancer:
        servers:
          - url: http://plane-space:4000

    plane-uploads:
      loadbalancer:
        servers:
          - url: http://minio:9000/