From eb37602d4ee4d103ee9d3f65c1c5508f200f6375 Mon Sep 17 00:00:00 2001 From: Konstantin Renner Date: Sat, 27 Jun 2026 00:18:07 +0200 Subject: [PATCH] netbird-server: route /management.ProxyService/ through Traefik for remote proxies Remote reverse-proxy instances (proxy-1) connect to the management server over Traefik via the ProxyService gRPC path. Traefik only routed ManagementService, so the remote proxy's mapping stream got Traefik's 404 HTML. Add a router for /management.ProxyService/ to the same management backend (h2c:33073). The local VPS-1 proxy is unaffected (it uses management:33073 directly). Co-Authored-By: Claude Opus 4.8 (1M context) --- .../roles/netbird-server/templates/docker-compose.yml.j2 | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/ansible/roles/netbird-server/templates/docker-compose.yml.j2 b/ansible/roles/netbird-server/templates/docker-compose.yml.j2 index 8877fc78..e04d0f48 100644 --- a/ansible/roles/netbird-server/templates/docker-compose.yml.j2 +++ b/ansible/roles/netbird-server/templates/docker-compose.yml.j2 @@ -187,6 +187,15 @@ services: - "traefik.http.routers.netbird-management.service=netbird-management" - "traefik.http.services.netbird-management.loadbalancer.server.port=33073" - "traefik.http.services.netbird-management.loadbalancer.server.scheme=h2c" + # gRPC reverse-proxy service — remote reverse-proxy instances (e.g. + # proxy-1) connect here via NB_PROXY_MANAGEMENT_ADDRESS=https://host:443. + # The local proxy uses management:33073 directly, so it never needed + # this route; remote ones get a 404 without it. Same backend (h2c 33073). + - "traefik.http.routers.netbird-proxyservice.rule=Host(`{{ netbird_server_host }}`) && PathPrefix(`/management.ProxyService/`)" + - "traefik.http.routers.netbird-proxyservice.entrypoints=websecure" + - "traefik.http.routers.netbird-proxyservice.tls=true" + - "traefik.http.routers.netbird-proxyservice.tls.certresolver=letsencrypt" + - "traefik.http.routers.netbird-proxyservice.service=netbird-management" networks: - netbird logging: -- 2.54.0