SSL, Traefik, and OAuth for Rancher! (Google, GitHub, Keycloak, Azure, and more!)
Do you want to self host your Rancher UI securely in your homelab? Have you thought about putting your Rancher UI behind Traefik and your reverse proxy to get free SSL certificates using Let’s Encrypt? Do you want to make your Rancher UI available publicly and secure it using 3rd party OAuth providers like Google, GitHub, Keycloak, Okta, Shibboleth, and more? Well this is the guide for you. In this step-by-step tutorial we’ll walk through setting up the Rancher UI to use Traefik reverse proxy, get SSL certificates using Let’s Encrypt, host our UI publicly, and then add 3rd party OAuth providers so that we can use 2 factor authentication (2FA) and all of the other security features auth providers give us.
★ Subscribe! https://bit.ly/techno-tim-subscribe
★ I’m Live Every Tues/Thurs/Sat on Twitch https://www.twitch.tv/TechnoTim
★ Join our Full Stack Discord Community! https://discord.gg/DJKexrJ
★ Documentation found here https://github.com/techno-tim/youtube-videos
__________________________________________
🔔 Social Media 🔔
► Twitch https://www.twitch.tv/TechnoTim
► Twitter https://twitter.com/TechnoTimLive
► Discord https://discord.gg/DJKexrJ
► Instagram https://www.instagram.com/techno.tim/
► Facebook https://www.facebook.com/TechnoTimLive/
► GitHub https://github.com/timothystewart6
__________________________________________
► Help Support the Channel on Patreon https://www.patreon.com/technotim
► Techno Tim Amazon Store:
https://www.amazon.com/shop/technotim
Techno Tim Kits:
► 4K YouTube Kit: https://kit.co/TechnoTim/4k-youtube-kit
► Pro Level Live Streaming Kit: https://kit.co/TechnoTim/pro-level-live-streaming-kit
► Budget Gaming Streaming PC 2020: https://kit.co/TechnoTim/budget-gaming-streaming-pc-2020
► Performance Virtualization Server: https://kit.co/TechnoTim/performance-virtualization-nas-server
► Budget NAS Server: https://kit.co/TechnoTim/budget-nas-server
► Coding & Gaming Keyboards: https://kit.co/TechnoTim/coding-gaming-keyboards
► Coding & Gaming Mice: https://kit.co/TechnoTim/coding-gaming-mice
👕 Most of my clothes come from Target https://goto.target.com/L7DOY
This description contains affiliate links. If you click on one of them, I’ll receive a small commission at no cost to you. Thank you.
00:00 – What are the challenges we’re currently facing?
00:33 – How did we get here?
00:55 – Why would we want to host it publicly?
01:35 – Which ports did we use?
01:49 – What are we going to do today?
02:04 – Let’s get started
02:25 – Create a kubernetes service for our Rancher UI
03:02 – A few things we need to do before our k8s Load Balancer
03:13 – Create a public DNS record
03:37 – Secure our admin account
04:21 – Remove old admin account
05:00 – Create HOST entry or local DNS entry
05:31 – Configure Traefik
06:05 – Rancher self-signed certificate fix
06:50 – Create k8s Load Balancer
07:40 – IMPORTANT – Create a k8s annotation
08:24 – We now have a certificate from Let’s Encrypt and Rancher service is public
09:02 – Configure third party authentication providers
09:46 – Configure our new OAth application
10:31 – Authenticate, approve our new application, and sign in
10:57 – Why did we do this?
11:32 – What do you think about configuring our Rancher UI with SSL and 3rd party auth?
12:04 – Stream Highlight – What are good specs for my Homelab server?
Previous video – https://www.youtube.com/watch?v=pAM2GBCDGTo
__________________________________________
⏯ Recommended Videos ⏯
► 20 Ways to Use a Virtual Machine (and other ideas for your homelab) https://www.youtube.com/watch?v=SVQmzaSabEQ
► Remote Gaming with Promox https://www.youtube.com/watch?v=fgx3NMk6F54
► Techno Tim Homelab Tour — Server Rack and Network https://www.youtube.com/watch?v=23jbcw_n20I
► Homelab Services Tour — What am I running on my Homelab? https://www.youtube.com/watch?v=NHvoN-phAgo
► Let’s Build a Discord Bot Using DiscordJS – Moderator Bot https://www.youtube.com/watch?v=YSZcyz2-twQ
__________________________________________
#Homelab #Rancher #SelfHosted #Docker #Plex #Kubernetes #TechnoTim #Proxmox #Virtualization
__________________________________________
Thank you for watching!
Which authentication provider are you planning on using?
btw, if you're new here, welcome!! 👋 Don't forget to subscribe for more videos like this!
One think I didn't quite grasp is that it seems that anyone with a GitHub account can now login into your Rancher right?
in which video u configured traefik?
Big thanks for your great content! What is your take on using microk8s instead of Rancher?
you are really great, and your channel is very beneficial, hope you the best my friend 👍👍👍
Hey Techno Tim. Can you do a video on setting up a reverse proxy for Airsonic? Airsonic is a music server similar to Subsonic, but it requires a reverse proxy to access without vpn. Nginix is an option and there is a docker image for it. Airsonic also has a docker image. Any help would be appreciated because I've really been struggling with setting this up with rancher. Thank you for all that you do.
I wish you made one for Traefik 2
it would be cool if you stream on youtube.
Hey Tim, can you go over the different methods for external storage methods like NFS storage
can passing gpu to a linux vm is possible ? because everyone is pass gpu to a windows vm
I see you've found the answer to the life, the universe and everything. Thanks!
very good, i like your way to expose complicated things (and ports 😀 ) 😀
Are you running Rancher inside of the Kubernetes cluster Rancher is managing?
The answer to my previous question ,thank you.
What is the benefit of doing this vs just setting up a VPN to your network for control?
Tim, do you have experience with securing apps with keycloak? I really would like to see a video about securing apps behind traefik with it.
You should check out NGINX Reverse Proxy, It is simpler and more user friendly. (jc21/nginx-proxy-manager) on docker hub.
Like all of your rancher videos! Can you maybe do a video on how to use it for homebridge
You really don't need to spend a whole lotta money on a used Dell server. I have an old Dell R-610 Enterprise class server, running Proxmox with Centos 7 and 8. If I recall I paid under $300.00 for it. And you can find 2.50 inch hard drivers for it , getting cheaper all of the time.
As long as you keep them under a 1 TB hd, you should be fine, while still getting 6TB worth of drive space.
I get to play with far more powerful stuff at work, So my old dell servers works just fine for me.
Nice can you add that "previous video" to the description ?
Nice!