Esempio mutual TLS con Traefik

Many configuration guides for SSH server suggest eliminating the login with a username/password and replace it with a key. More and more I use this solution in my small home environment. A day on Twitter I have seen this tweet and I have made some tests with mutual TLS (or mTLS).

🇫🇷 Community Contribution 👉 Sécuriser #Traefik avec du mTLS by Romain Boulanger https://t.co/TofOPAYVYC

— Traefik Labs (@traefik) March 26, 2021

I find mTLS really helpful when you cannot use a VPN, for example on an enterprise pc or due to some firewall restriction. So you can protect your services with a certificate installed in a browser. This solution works only for sites that should only accessible for a few users.

My experience with Home Assistant

A letter from Swisscom arrived two years ago and created a problem for the management of the heating of the house in the mountains. Because they informed us of the termination in end of 2020 of the GSM or 2G (old generation telephony) service. The current modem in the control module installed 7 years ago is not compatible with 3G or higher and therefore needed to be replaced. But with what?

SSO and 2FA for Traefik and Docker containers

Traefik 2.x examples

TLTR

On GitHub you can find a repository with some examples of traefik (version 2.x) configuration. You find the docker-compose and the guide on how to use this.

Feel free to report the issue if something is not working.

Intro

I have no trouble saying that I am a bad developer (no problem is not my work). In my home network, I play with some systems. For 2-3 years I experiment with docker and my container number it’s growing every month. Sometimes it is only a test and the container lives for a few hours. But there is a group of services that are important for my home, like:

Curling stopwatch DIY

This is my second version of the curling training stopwatch. The major improvements in comparison to the older version are: better power management, stable software and new control function.

The new system has two photocells, where the master of the system is the stop one. The start photocell is a slave, like the other module. There are two ways to show the information from the system: first one with a smartphone connected via Bluetooth to the Stop photocell. The second one is a dedicated slave module (like the Start photocell) where the communication between modules is made with a nRF24l01 (I use the version with pa+lna). In my redesign I only updated the software of my old display module but I didn’t do any other change because I chose to develop a better Android app to show the information.