InsecureSkipVerify: true traefik.yaml http: /volume2/appdata/traefik/config:/etc/traefik - A location on your NAS where we'll store the TLS certs and a couple of configuration files for TraefikĮnsure that the config directory exists ( /volume2/appdata/traefik/config above) and place two files into it.CLOUDFLARE_API_KEY - Cloudflare global API key.CLOUDFLARE_EMAIL - Cloudflare account email.var/run/docker.sock:/var/run/docker.sock:ro volume2/appdata/traefik/config:/etc/traefik SSH into the Synology and create a file called docker-compose.yml, put it in your home folder if you like and using the following contents:. We will use docker-compose to manage our containers. :~$ docker-compose -versionĭocker-compose version 1.28.5, build 324b023a You will need docker and docker-compose installed Directing Traefik Docker is available as package from Synology and docker-compose has its own installation docs which work fine our purposes. This is a simple step but an important one. I ticked the box Automatically redirect HTTP connection to HTTPS for DSM desktop which makes our life a little later more complicated but ensures that communications are always encrypted which is what we want. As you can see, I picked 5000 for the HTTP port and 5001 for the HTTPS port. The ports you pick aren't important but they must be consistent throughout this entire process. Typically, DSM likes to grab these but that's not what we want. Traefik expects that port 80 and 443 are available for its use so we must ensure that these are available. Not every Synology NAS will support running docker, if yours doesn't then this guide is not for you. This guide assumes that you have your own domain and the DNS for that domain is managed by a supported DNS provider - in my case I use Cloudflare. So it's logical to me to use Traefik to handle reverse proxying and TLS certification with the Synology box I have - the DS1621+. I use Traefik as my reverse proxy of choice, I understand it well and use it everywhere across about a dozen hosts - both at home and in the cloud. It now runs a recent version of docker, I can use Ansible to manage docker-compose like I do with all my other systems and it now runs systemd! With the recent update to DSM7 my Synology NAS has been transformed.

Adguard synology