POC: compare Traefik with the dynamic development proxy

.docker/docker-compose.proxy.yml

@@ -1,52 +1,53 @@
 services:
-  nginx-proxy:
-    image: nginxproxy/nginx-proxy:1.11.6-alpine@sha256:99376e95c8754547213d411222a2c4dca046d974e753ae2a1c9aef09b2c03364
+  traefik:
+    image: traefik:v3.7.13@sha256:f86a2cab1b5c649070c49f883c743dd32d8485a56e3368c5f93b9e91f1e91259
     container_name: librecode-dev-proxy
     labels:
       coop.librecode.dev-proxy: "true"
-    working_dir: /dashboard
-    command: ["forego", "start", "-r"]
+      traefik.enable: "true"
+      traefik.http.routers.librecode-api.rule: Path(`/api/http/routers`)
+      traefik.http.routers.librecode-api.priority: "200"
+      traefik.http.routers.librecode-api.entrypoints: api
+      traefik.http.routers.librecode-api.service: api@internal
+    command:
+      - --api=true
+      - --providers.docker=true
+      - --providers.docker.exposedbydefault=false
+      - --providers.docker.network=librecode-dev-proxy
+      - --entrypoints.web.address=:80
+      - --entrypoints.web.http.redirections.entrypoint.to=websecure
+      - --entrypoints.web.http.redirections.entrypoint.scheme=https
+      - --entrypoints.websecure.address=:443
+      - --entrypoints.api.address=:8080
+      - --entrypoints.websecure.asdefault=true
+      - --entrypoints.websecure.http.tls=true
     ports:
       - "${PROXY_IP_BIND:-127.0.0.1}:80:80"
       - "${PROXY_IP_BIND:-127.0.0.1}:443:443"
     volumes:
-      - ${DOCKER_SOCKET:-/var/run/docker.sock}:/tmp/docker.sock:ro
-      - librecode-dev-proxy-vhost:/etc/nginx/vhost.d
-      - librecode-dev-proxy-assets:/dashboard:ro
-      - librecode-dev-proxy-log:/etc/nginx/log
-      - librecode-dev-proxy-certs:/etc/nginx/certs:ro
-    environment:
-      - ENABLE_IPV6=true
-      - VIRTUAL_HOST=localhost,*.localhost
-      - VIRTUAL_PORT=80
-      - SELF_SIGNED_HOST=localhost,*.localhost
+      - ${DOCKER_SOCKET:-/var/run/docker.sock}:/var/run/docker.sock:ro
     networks:
       - proxy
 
-  ssl-companion:
-    image: sebastienheyd/self-signed-proxy-companion:1.1.0@sha256:dd698341f804aaffe2974931a185aa088561d76094e040e374847f3a64004d43
-    container_name: librecode-dev-proxy-ssl-companion
+  dashboard:
+    image: nginx:1.31.5-alpine@sha256:72ba65eb42c10344912a84ff42408db7d34f2feb642204570ab8fc5ffd29f1d3
+    container_name: librecode-dev-dashboard
     labels:
-      coop.librecode.dev-proxy-companion: "true"
-    volumes:
-      - ${DOCKER_SOCKET:-/var/run/docker.sock}:/var/run/docker.sock:ro
-      - librecode-dev-proxy-certs:/etc/nginx/certs:rw
-    environment:
-      - NGINX_PROXY_CONTAINER=librecode-dev-proxy
+      coop.librecode.dev-proxy-dashboard: "true"
+      traefik.enable: "true"
+      traefik.http.routers.librecode-dashboard.rule: Host(`localhost`)
+      traefik.http.routers.librecode-dashboard.priority: "100"
+      traefik.http.routers.librecode-dashboard.service: librecode-dashboard
+      traefik.http.routers.librecode-dashboard-catchall.rule: HostRegexp(`[a-z0-9-]+\.localhost`)
+      traefik.http.routers.librecode-dashboard-catchall.priority: "1"
+      traefik.http.routers.librecode-dashboard-catchall.service: librecode-dashboard
+      traefik.http.routers.librecode-dashboard-catchall.middlewares: librecode-not-found
+      traefik.http.middlewares.librecode-not-found.replacepath.path: /__librecode_not_found__
+      traefik.http.services.librecode-dashboard.loadbalancer.server.port: "80"
     networks:
       - proxy
 
 networks:
   proxy:
     name: librecode-dev-proxy
     external: true
-
-volumes:
-  librecode-dev-proxy-vhost:
-    name: librecode-dev-proxy-vhost
-  librecode-dev-proxy-assets:
-    name: librecode-dev-proxy-assets
-  librecode-dev-proxy-log:
-    name: librecode-dev-proxy-log
-  librecode-dev-proxy-certs:
-    name: librecode-dev-proxy-certs

.docker/scripts/proxy-coordinator.sh

@@ -18,8 +18,8 @@ export COORDINATOR_CONTAINER PROJECT_NAME
 # analyze the complete dependency graph without file-wide suppressions.
 # shellcheck source=.docker/scripts/proxy/infrastructure.sh
 . "$proxy_lib_dir/infrastructure.sh"
-# shellcheck source=.docker/scripts/proxy/assets.sh
-. "$proxy_lib_dir/assets.sh"
+# shellcheck source=.docker/scripts/proxy/dashboard.sh
+. "$proxy_lib_dir/dashboard.sh"
 # shellcheck source=.docker/scripts/proxy/diagnostics.sh
 . "$proxy_lib_dir/diagnostics.sh"
 # shellcheck source=.docker/scripts/proxy/services.sh
@@ -86,9 +86,8 @@ wait_for_shutdown() {
 run() {
 	validate_environment
 	ensure_proxy_network
-	install_proxy_assets
-
 	proxy_state="$(ensure_proxy_running)"
+	install_dashboard_assets
 	install_runtime_diagnostics
 
 	acquire_proxy_lease

.docker/scripts/proxy/dashboard.sh

@@ -0,0 +1,9 @@
+#!/bin/sh
+
+install_dashboard_assets() {
+	dashboard_container="${PROXY_DASHBOARD_CONTAINER:-librecode-dev-dashboard}"
+
+	Docker cp "${PROJECT_DIR:-}/.docker/traefik/dashboard.html" "$dashboard_container:/usr/share/nginx/html/index.html"
+	Docker cp "${PROJECT_DIR:-}/.docker/traefik/dashboard.conf" "$dashboard_container:/etc/nginx/conf.d/default.conf"
+	Docker exec "$dashboard_container" nginx -s reload
+}

.docker/scripts/proxy/diagnostics.sh

@@ -79,10 +79,13 @@ runtime_diagnostics_json() {
 }
 
 install_runtime_diagnostics() {
-	proxy_container="$(compatible_proxy_container)"
-	[ -n "$proxy_container" ] || return 1
+	dashboard_container="${PROXY_DASHBOARD_CONTAINER:-librecode-dev-dashboard}"
+
+	if ! Docker inspect "$dashboard_container" >/dev/null 2>&1; then
+		return 1
+	fi
 
 	runtime_diagnostics_json |
-		Docker exec -i "$proxy_container" \
+		Docker exec -i "$dashboard_container" \
 			sh -c 'cat > /usr/share/nginx/html/runtime.json'
 }

.docker/traefik/dashboard.conf

@@ -0,0 +1,29 @@
+server {
+    listen 80;
+    server_name _;
+
+    root /usr/share/nginx/html;
+    index index.html;
+
+    location = /__librecode_not_found__ {
+        return 404;
+    }
+
+    error_page 404 /index.html;
+
+    location = /index.html {
+    }
+
+    location = /runtime.json {
+        try_files $uri =404;
+    }
+
+    location = /api/http/routers {
+        proxy_pass http://traefik:8080;
+        proxy_set_header Host localhost;
+    }
+
+    location / {
+        try_files $uri /index.html;
+    }
+}