Finally (after thinking i'm definitely lost) I have enabled both these in traefik values.yaml:
## -- Trust forwarded headers information (X-Forwarded-*).
forwardedHeaders:
trustedIPs: []
insecure: true
#
## -- Enable the Proxy Protocol header parsing for the entry point
proxyProtocol:
trustedIPs: []
insecure: true
#
And everything works (including tls). I just wonder what it means and if insecure=true is correct...
False doesn't work.
@mscrocdile Ah yes, this was probably restricting the traffic coming in. Note the following:
Setting insecure to true in the context of the Proxy Protocol means that Traefik will accept Proxy Protocol headers from all incoming connections, regardless of their source IP address. This is considered insecure because it trusts the incoming Proxy Protocol headers without any restriction. In a secure setup, you would typically specify a list of trusted IPs that are known to send correct and safe Proxy Protocol headers.