paradizelost/paperless-ngx
1
0
Fork 0
mirror of https://github.com/paperless-ngx/paperless-ngx.git synced 2025-04-02 13:45:10 -05:00
Code Issues Packages Projects Releases Wiki Activity

Add Traefik information.

dKatsuro 2025-03-31 03:11:31 -04:00
parent fb340d2f16
commit c036ab2c9f
1 changed files with 21 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
Using-a-Reverse-Proxy-with-Paperless-ngx.md

@ -1,8 +1,10 @@
[Nginx](#nginx) | [Apache](#apache) | [Caddy](#caddy)
[Nginx](#nginx) | [Apache](#apache) | [Caddy](#caddy) | [Traefik](#traefik)
If you want to expose paperless to the internet, you should hide it
behind a reverse proxy with SSL enabled. The officially supported method is Nginx.
If you get a `CSRF verification failed` error upon login, your compose or .env file is missing a valid [PAPERLESS_URL](https://docs.paperless-ngx.com/configuration/#PAPERLESS_URL) value.
# Nginx
In addition to the usual configuration for SSL, the following
@ -157,4 +159,22 @@ Below is an example Caddy configuration
header_down Referrer-Policy "strict-origin-when-cross-origin"
}
}
```
# Traefik
Below is an example Traefik configuration you would add to the webserver container.
- Make sure you replace `traefik_proxy` with the name of your own reverse proxy network.
- Change the hostname to your own.
- Adjust the entrypoints if needed. Usually `websecure`, some people have it setup as `https`.
```
labels:
- "traefik.enable=true"
- "traefik.docker.network=traefik_proxy"
- "traefik.http.routers.paperless.rule=Host(`paperless.example.com`)"
- "traefik.http.routers.paperless.entrypoints=websecure"
- "traefik.http.routers.paperless.tls=true"
- "traefik.http.routers.paperless.tls.certresolver=letsencrypt"
- "traefik.http.services.paperless.loadbalancer.server.port=8000"
```