hetzner-devops/incus-ui-setup.md

Incus UI Setup via Traefik

Status: ✅ COMPLETED

Configuration Details

• Domain: https://incus.nsntr.id
• Backend: https://148.251.14.221:8443
• SSL: Let's Encrypt certificate
• Security: HTTPS-only with security headers

Traefik Configuration

# Incus UI Router
incus-router:
  rule: "Host(`incus.nsntr.id`)"
  service: incus-service
  entryPoints:
    - websecure
  tls:
    certResolver: letsencrypt
  middlewares:
    - secure-headers

# Incus UI Service
incus-service:
  loadBalancer:
    servers:
      - url: "https://148.251.14.221:8443"
    serversTransport: incus-transport

# Transport Configuration
incus-transport:
  insecureSkipVerify: true

Access Information

• URL: https://incus.nsntr.id
• Authentication: Incus certificate authentication required
• Certificate: Use existing Incus client certificate

Security Features

• ✅ HTTPS-only access
• ✅ Security headers applied
• ✅ SSL certificate validation
• ✅ Secure transport configuration

---

Date: $(date) Status: Incus UI accessible via domain Next: Configure Incus client certificate authentication