base.<domain>, auth.<domain>, and kuma.<domain>.
Prerequisites
Open Traefik only from a trusted network or through the protection configured by StackKits.
Steps
Check routers
Confirm that each enabled service has a router and points to the expected service backend.
Verify
- Routers exist for enabled services.
- Backend services show healthy targets.
- Public and protected routes match your rollout intent.
Next steps
TinyAuth
Confirm auth behavior for protected routes.
Whoami
Inspect forwarding headers on a diagnostic route.
Troubleshooting
A route exists but returns a bad gateway
A route exists but returns a bad gateway
The reverse proxy is reachable, but the target container or internal port is not. Check the service container first.
