Try not to use paths, you’ll have some weird cross-interactions when two pieces of software set the same cookie (session cookies for example), which will make you reauthenticate for every path.

Subdomains are the way to go, especially with wildcard DNS entries and DNS-01 letsencrypt challenges.

RemindMe! 5 months

I second that. Amazing easy to use, configure, supports (LetsEncrypt) certificates via DNS-01 challenge and integrates with ease with most DNS providers.

Paired with authentication providers (keycloak, authelia, authentik), the “advanced” textbox lets you do forward proxying really easy, or customize your “basic proxy”.

I’m not sure how many of these features are present in Traefik, it would be really nice if any of you know if any of these are easily supported in it:

• Forward proxying
• Custom rewrites (nginx internal; rewrites)
• Unattended DNS-01 support with ACME (LetsEncrypt)