How to configure traefik to proxy to the port used by the backend

[defp]

The app container expose two port 22 and 30000

traefik send request to 22, but the web server listen 30000, traefik should proxy request to 30000 port

2024-07-05T10:45:27.314162524Z time="2024-07-05T10:45:27Z" level=debug msg="'502 Bad Gateway' caused by: dial tcp 172.17.0.4:22: connect: connection refused"

the request should be forward to 30000 port

I add EXPOSE 30000 to Dockerfile， but not work

[acidtib]

hi @defp can you share your deploy.yml config

[defp]

@acidtib

# Name of your application. Used to uniquely configure containers.
service: dataengine-ai

# Name of the container image.
image: kamal/dataengine-ai

# Deploy to these servers.
servers:
  web:
    hosts:
      # - 10.3.56.150
      - 10.3.56.132
      # - 10.3.56.151
    options:
      gpus: all

# Credentials for your image host.
registry:
  # Specify the registry server, if you're not using Docker Hub
  # server: registry.digitalocean.com / ghcr.io / ...
  server: registry.domain
  username: user

  # Always use an access token rather than real password when possible.
  password:
    - KAMAL_REGISTRY_PASSWORD
# Inject ENV variables into containers (secrets come from .env).
# Remember to run `kamal env push` after making changes!
env:
  clear:
    MODELS_PATH: /root/models
    SENTRY_ENV: dev
  secret:
    - DATABASE_HOST
    - DATABASE_NAME
    - DATABASE_USER
    - DATABASE_PORT
    - DATABASE_PASSWORD
    - ES_ADDRESS
    - ES_USERNAME
    - ES_PASSWORD
    - ES_DRUG_APPROVAL_NUMBER_BUSINESS_INDEX
    - REDIS_HOST
    - REDIS_PORT
    - REDIS_DB
    - REDIS_USERNAME
    - REDIS_PASSWORD

# Use a different ssh user than root
# ssh:
#   user: app

# Configure builder setup.
# builder:
#   args:
#     RUBY_VERSION: 3.2.0
#   secrets:
#     - GITHUB_TOKEN
#   remote:
#     arch: amd64
#     host: ssh://app@192.168.0.1

builder:
  remote:
    arch: amd64
    host: ssh://root@10.3.56.160
# Use accessory services (secrets come from .env).
# accessories:
#   db:
#     image: mysql:8.0
#     host: 192.168.0.2
#     port: 3306
#     env:
#       clear:
#         MYSQL_ROOT_HOST: '%'
#       secret:
#         - MYSQL_ROOT_PASSWORD
#     files:
#       - config/mysql/production.cnf:/etc/mysql/my.cnf
#       - db/production.sql:/docker-entrypoint-initdb.d/setup.sql
#     directories:
#       - data:/var/lib/mysql
#   redis:
#     image: redis:7.0
#     host: 192.168.0.2
#     port: 6379
#     directories:
#       - data:/data

# Configure custom arguments for Traefik. Be sure to reboot traefik when you modify it.
traefik:
  image: uhub.service.ucloud.cn/nocode-mirrors/traefik:v2.10
  host_port: 10086
  args:
    accesslog: true
    accesslog.format: json

# Configure a custom healthcheck (default is /up on port 3000)
healthcheck:
  path: /health
  port: 30000
  max_attempts: 15

# Bridge fingerprinted assets, like JS and CSS, between versions to avoid
# hitting 404 on in-flight requests. Combines all files from new and old
# version inside the asset_path.
#
# If your app is using the Sprockets gem, ensure it sets `config.assets.manifest`.
# See https://github.com/basecamp/kamal/issues/626 for details
#
# asset_path: /rails/public/assets

# Configure rolling deploys by setting a wait time between batches of restarts.
# boot:
#   limit: 10 # Can also specify as a percentage of total hosts, such as "25%"
#   wait: 2

# Configure the role used to determine the primary_host. This host takes
# deploy locks, runs health checks during the deploy, and follow logs, etc.
#
# Caution: there's no support for role renaming yet, so be careful to cleanup
#          the previous role on the deployed hosts.
# primary_role: web

# Controls if we abort when see a role with no hosts. Disabling this may be
# useful for more complex deploy configurations.
#
# allow_empty_roles: false

volumes:
  - /root/models/:/root/models/
  - /root/.paddleocr:/root/.paddleocr

[defp]

#58

[defp]

deploy log for traefik

INFO [7b0ea538] Running docker run --detach --restart unless-stopped --name dataengine-ai-web-c939a4270f625edf44144ee5e2bf5841f51b38ac --hostname 10.3.56.132-da91766b923a -e KAMAL_CONTAINER_NAME="dataengine-ai-web-c939a4270f625edf44144ee5e2bf5841f51b38ac" -e KAMAL_VERSION="c939a4270f625edf44144ee5e2bf5841f51b38ac" --env-file .kamal/env/roles/dataengine-ai-web.env --env MODELS_PATH="/root/models" --env SENTRY_ENV="dev" --health-cmd "(curl -f http://localhost:30000/health || exit 1) && (stat /tmp/kamal-cord/cord > /dev/null || exit 1)" --health-interval "1s" --volume $(pwd)/.kamal/cords/dataengine-ai-web-c51fb21f11416857eb33161354de6075:/tmp/kamal-cord --log-opt max-size="10m" --volume /root/models/:/root/models/ --volume /root/.paddleocr:/root/.paddleocr --label service="dataengine-ai" --label role="web" --label destination --label traefik.http.services.dataengine-ai-web.loadbalancer.server.scheme="http" --label traefik.http.routers.dataengine-ai-web.rule="PathPrefix(`/`)" --label traefik.http.routers.dataengine-ai-web.priority="2" --label traefik.http.middlewares.dataengine-ai-web-retry.retry.attempts="5" --label traefik.http.middlewares.dataengine-ai-web-retry.retry.initialinterval="500ms" --label traefik.http.routers.dataengine-ai-web.middlewares="dataengine-ai-web-retry@docker" --gpus "all" registry.nocode-tech.com/kamal/dataengine-ai:c939a4270f625edf44144ee5e2bf5841f51b38ac on 10.3.56.132

[defp]

not work

[defp]

https://doc.traefik.io/traefik/v2.0/providers/docker/#port-detection

[defp]

this works

[andrewmkano]

Thank you so much @defp, this was very helpful 🙏🏽