Traefik Manager

A self-hosted web UI for managing and monitoring your Traefik reverse proxy - add routes, manage middlewares, view TLS certificates, and inspect live traffic, all without editing YAML by hand.

---

Get Started

Traefik Stack

One command installs Traefik + Traefik Manager together, or Traefik Manager on its own via Docker or a native Linux service.

Traefik Stack guide →

Docker

Deploy with Docker Compose - minimal setup, pre-built image on GHCR.

Docker guide →

Podman

Rootless containers, Quadlet/systemd, SELinux volume labels.

Podman guide →

Linux (native)

Run directly on the host with Python + systemd. No container runtime needed.

Linux guide →

Unraid

Install on Unraid with a pre-built template.

Unraid guide →

---

Management

These tabs are always visible. They let you read and write your Traefik dynamic config.

Tab	Description
Routes	Create, edit, delete, and enable/disable HTTP, TCP, and UDP routes
Middlewares	Create and manage middlewares with built-in templates
Services	Read-only view of all services across every provider

Multiple config files - mount several Traefik dynamic config files using CONFIG_DIR or CONFIG_PATHS. A dropdown in the route/middleware modals lets you choose which file each entry is saved to. See Environment Variables for setup.

---

Visualizations

Optional tabs - toggle on in Settings - Interface - Tabs or during the setup wizard. No extra mounts needed.

Tab	Description
Dashboard	Routes grouped by category with app icons, custom groups, and per-card editing
Route Map	Topology connection map - entry points → routes → middlewares → services

---

Monitoring

Optional tabs - each requires a file mounted into the container.

Tab	Mount required	Description
Certificates	acme.json:/app/acme.json:ro	TLS certificates with expiry tracking
Plugins	traefik.yml:/app/traefik.yml:ro	Plugins declared in your static config
Logs	access.log:/app/logs/access.log:ro	Live Traefik access log tail

---

Providers

Read-only tabs that pull live data from the Traefik API. No extra mounts needed - just a working API connection.

Orchestrators

Tab	Provider
Docker	docker
Kubernetes	kubernetesCRD / kubernetesIngress / kubernetesGateway
Swarm	swarm
Nomad	nomad
ECS	ecs
Consul Catalog	consulCatalog

Key-Value Stores

Tab	Provider
Redis	redis
etcd	etcd
Consul KV	consul
ZooKeeper	zooKeeper

Config-based

Tab	Provider
HTTP Provider	http
File (external)	file

Traefik Manager's own routes are automatically excluded from the File provider tab.

---

Configuration

Page	Description
manager.yml	Full settings file reference - all keys, types, and defaults
Environment Variables	All supported environment variables with override behaviour
OIDC / SSO Login	Supports OpenID Connect (OIDC) as an additional login method alongside the built-in password.

---

Operations

Page	Description
Reset Password	CLI reset, TOTP recovery, and manual reset via manager.yml
Security	Security controls, API keys, sessions, and hardening recommendations

---

Mobile App

The traefik-manager-mobile companion app connects using an API key.

Go to Settings - Authentication - App / Mobile API Keys, click Add Key, enter a device name, and copy the generated key. Each device gets its own key - you can revoke one without affecting others.

---

Self Route

Put Traefik Manager itself behind Traefik so you can access it via a domain with HTTPS.

Go to Settings - Connection - Self Route. The URL field pre-fills from your current hostname and the service URL is detected from your existing config if a matching route is found. Click Save Route - TM writes the router and service entries into your dynamic config file. No changes to traefik.yml needed.

---

Traefik provider config snippets

Minimal additions to your traefik.yml to enable each provider tab.

providers:
  docker:
    exposedByDefault: false

---

Mobile App

A companion Android app for managing Traefik Manager on the go. Requires v0.6.0 or higher.

Traefik Manager Mobile

Browse routes, middlewares, and services. Enable/disable routes. Add and edit with built-in templates. Follows system light/dark theme.

Authenticates via the API key from Settings → Authentication.

Download APKRelease page

Mobile docs →

---

Tech Stack

Layer	Technology
Backend	Python 3.11 · Flask · Gunicorn
Config	ruamel.yaml (preserves comments)
Auth	bcrypt · pyotp (TOTP) · Flask sessions · CSRF
Frontend	Vanilla JS · Tailwind CSS · Phosphor Icons
Container	Docker · Alpine Linux