# Incus UI Setup via Traefik

## Status: ✅ COMPLETED

### Configuration Details
- **Domain**: https://incus.nsntr.id
- **Backend**: https://148.251.14.221:8443
- **SSL**: Let's Encrypt certificate
- **Security**: HTTPS-only with security headers

### Traefik Configuration
```yaml
# Incus UI Router
incus-router:
  rule: "Host(`incus.nsntr.id`)"
  service: incus-service
  entryPoints:
    - websecure
  tls:
    certResolver: letsencrypt
  middlewares:
    - secure-headers

# Incus UI Service
incus-service:
  loadBalancer:
    servers:
      - url: "https://148.251.14.221:8443"
    serversTransport: incus-transport

# Transport Configuration
incus-transport:
  insecureSkipVerify: true
```

### Access Information
- **URL**: https://incus.nsntr.id
- **Authentication**: Incus certificate authentication required
- **Certificate**: Use existing Incus client certificate

### Security Features
- ✅ HTTPS-only access
- ✅ Security headers applied
- ✅ SSL certificate validation
- ✅ Secure transport configuration

---
**Date**: $(date)
**Status**: Incus UI accessible via domain
**Next**: Configure Incus client certificate authentication