Kamal Deploy with a self signed certificate for SSL

Use Traefik's own self signed certificate feature out of the box


If you use Kamal Deploy behind a service like Cloudflare or some Load Balancer which terminates SSL, and using Let's Encrypt is not an option, you can setup Traefik to use a self signed certificate.

Simply modify the servers and traefik part of your deploy.yml as following:

servers:
  web:
    hosts:
      - your-host
    labels:
      traefik.http.routers.yourservice.entrypoints: websecure

traefik:
  options:
    publish:
      - "443:443"
  args:
    entryPoints.websecure.address: ":443"
    entrypoints.websecure.http.tls: true

And now you can access your server using a https:// link (beware of the ssl error warning of your browser) OR tell Cloudflare to encrypt end-to-end, using a self signed certificate on the server.