A guide for deploying and troubleshooting Traefik, a reverse proxy that routes web requests to services and can handle HTTPS certificates. It covers configuration, routing, middleware, and Docker examples.

Use it to set up Traefik with containers, configure HTTP and HTTPS routes, manage certificates, and check a running instance.

It helps diagnose routing and TLS problems without requiring you to piece together configuration from scattered documentation.

traefik — Skill for Claude Code and Codex by magnus919

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add magnus919/agent-skills --skill traefik

Clone the repo

git clone --depth 1 https://github.com/magnus919/agent-skills

Made for: Claude Code, Codex.

Its marketplace also offers this one on its own, as the plugin traefik — /plugin install traefik after adding the marketplace above.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/magnus919/agent-skills/traefik/github.svg)](https://agentmods.dev/skills/magnus919/agent-skills/traefik)

Your own site

<a href="https://agentmods.dev/skills/magnus919/agent-skills/traefik"><img src="https://agentmods.dev/badge/skills/magnus919/agent-skills/traefik/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/magnus919/agent-skills/traefik"><img src="https://agentmods.dev/badge/skills/magnus919/agent-skills/traefik.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 67 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 2,558 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 1 finding. A grade says what 26 rules found in the file — not that it is safe. Third-party audits

NVIDIA SkillSpector warn 7 Sept 2026

SkillSpector: 1 finding, up to high

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

high Privilege Escalation · line 49
Potential security issue detected. Manual review is recommended.

Fix: Review the flagged content for security risks. Ensure no credentials, secrets, or sensitive data are exposed.

How audits are shown

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00067	$0.02558
Opus 5	$0.00034	$0.01279
Sonnet 5	$0.00013	$0.00512
Haiku 4.5	$0.00007	$0.00256

Measured 5d ago against content hash 13ee05738d1b, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-10, from the pricing page.

Security

Grade A, and why

traefik scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

The scan reads SKILL.md. This mod also ships 1 executable file (scripts/traefik-healthcheck.sh), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

- **Entrypoint-level `headers` middleware overwrites router-level CSP (silent SPA breakage):** Entrypoint middlewares run **last on the response path**, and the `headers` middleware overwrites existing headers with ident

traefik/SKILL.md · 112 lines

How it starts

The opening of the file, as written. The whole thing — 112 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Traefik Agent Skill

Comprehensive reference for deploying, configuring, and maintaining Traefik v3 as a reverse proxy and load balancer. This skill covers every major feature of Traefik Proxy OSS with production-ready YAML configuration examples.

Quick Start — Minimal Docker Deployment

A production-ready Docker Compose template is available at templates/docker-compose.yml. For a quick test:

One-Line Health Check

bash scripts/traefik-healthcheck.sh           # Text output
bash scripts/traefik-healthcheck.sh --json    # JSON output for agents

# docker-compose.yml
services:
  traefik:
    image: traefik:v3.7
    command:
      # Static configuration via CLI args
      - "--providers.docker=true"
      - "--providers.docker.exposedbydefault=false"
      - "--entrypoints.web.address=:80"
      - "--entrypoints.websecure.address=:443"
      - "--api.dashboard=true"
      - "--api.insecure=false"
    ports:
      - "80:80"
      - "443:443"
      - "8080:8080"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    labels:
      # Dashboard router
      - "traefik.http.routers.dashboard.rule=Host(`traefik.example.com`)"
      - "traefik.http.routers.dashboard.service=api@internal"
      - "traefik.http.routers.dashboard.middlewares=auth"
      - "traefik.http.middlewares.auth.basicauth.users=admin:$$2y$$10$$..."

Core Concepts

Traefik has two configuration layers:

Static configuration — set at startup via YAML file, CLI args, or env vars. Defines entryPoints, providers, API, metrics, TLS resolvers.
Dynamic (routing) configuration — changes at runtime. Defined via providers (Docker labels, File provider YAML, Kubernetes CRDs).

The request flow: EntryPoint → Router → (Middlewares) → Service → Backend

Reference Files

Topic	Load When	File
Static Config	Setting up Traefik for the first time, adding entryPoints, providers, or global settings	`references/static-configuration.md`
Docker Provider	Labeling containers for routing, configuring multiple networks, port detection	`references/docker-provider.md`
HTTP Routing	Writing Host/Path matchers, understanding priority, rule syntax	`references/http-routing.md`
Middleware Catalog	Adding auth, rate limiting, header manipulation, path rewriting, error pages	`references/middleware-catalog.md`
TLS & ACME	Configuring Let's Encrypt, wildcard certs, DNS-01/HTTP-01 challenges, mTLS	`references/tls-acme.md`
TCP & UDP Routing	Routing non-HTTP traffic, SNI matching, TLS termination for TCP	`references/tcp-routing.md`
API & Dashboard	Securing the dashboard, API endpoints, debugging routes	`references/api-dashboard.md`
Observability	Prometheus/OTel metrics, access logs, tracing, health checks	`references/observability.md`
v2→v3 Migration	Breaking changes, rule syntax update, deprecated options	`references/migration-v2-to-v3.md`
Production Patterns	Docker Compose template, security hardening, HA, monitoring	`references/production-deployment.md`
Servers Transport	Backend connection config, mTLS to backends, connection pooling, SPIFFE	`references/servers-transport.md`
Kubernetes Providers	Deploying Traefik in K8s — Ingress, CRD (IngressRoute), Gateway API	`references/kubernetes-providers.md`
Other Providers	ECS, Nomad, Consul Catalog, KV stores, File, HTTP, REST providers	`references/other-providers.md`
Community Patterns	Production wisdom — middleware ordering, performance tuning, CDN real-IP, CrowdSec, Authelia, troubleshooting	`references/community-patterns.md`
Operational Audit	Full-stack audit methodology — surface inventory, config review, runtime state, log analysis, classification framework	`references/operational-audit.md`
CSP / SPA Debugging	Entrypoint header overwrite silently breaks cross-origin SPAs — diagnostic flow, fix, CORS preflight interception	`references/csp-spa-debugging.md`
Plugins & Extending	Yaegi and WASM plugins, plugin configuration, FastProxy	`references/plugins-extend.md`

Read the full file on GitHub · 112 lines

Files

What ships with it

21 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

5d ago First seen · 112 lines · 67 tokens per session scan A 13ee05738d1b

Subscribe to this mod's changes

traefik is a skill published in the GitHub repository magnus919/agent-skills (76 stars, last pushed today), licensed MIT. It adds 67 tokens to every session and 2,558 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-05.

Cloud Containers DevOps and cloud LLM agent-skills agentskills ai-agents automation

langbot-deploy

Deploy and configure a LangBot instance — Docker / Docker Compose, Kubernetes, the config.yaml model, the Box sandbox runtime, the plugin runtime, and the global API key. Use when installing, deploying, upgrading, or configuring LangBot in production or self-hosted environments. Triggers on "deploy langbot", "langbot…

langbot-app/LangBot · 104 tokens

compute-env-setup

Set up a compute environment on a remote provider so Claude Science jobs can run there. Covers direct SSH/conda hosts, Slurm clusters, container-via-bridge runners, and managed-API providers (Modal, GCP, RunPod). Use when standing up a new provider, porting an env to a different backend, adding a tool that needs its…

UnicomAI/wanwu · 134 tokens

traefik