upgrade traefik to v3.5 in advanced guide

Author: swiffer

CHANGELOG.md

@@ -49,6 +49,7 @@
 - docs(dev): provide guidelines for checking dependency updates before merging (#4969 - @JakobLichterfeld)
 - docs: add domain prefix to Home Assistant default_entity_id (#5014 - @gym22)
 - docs: add star history (#5024 - @JakobLichterfeld)
+- docs: bump Traefik to v3.5 and enable http3 in advanced guide (#5023 - @swiffer)
 
 ## [2.1.1] - 2025-08-16
 

website/docs/advanced_guides/traefik.md

@@ -43,15 +43,12 @@ services:
       - ./import:/opt/app/import
     labels:
       traefik.enable: "true"
-      traefik.port: "4000"
+      traefik.http.services.teslamate.loadbalancer.server.port: "4000"
       traefik.http.middlewares.redirect.redirectscheme.scheme: "https"
       traefik.http.middlewares.teslamate-auth.basicauth.realm: "teslamate"
       traefik.http.middlewares.teslamate-auth.basicauth.usersfile: "/auth/.htpasswd"
       traefik.http.routers.teslamate-insecure.rule: "Host(`${FQDN_TM}`)"
       traefik.http.routers.teslamate-insecure.middlewares: "redirect"
-      traefik.http.routers.teslamate-ws.rule: "Host(`${FQDN_TM}`) && Path(`/live/websocket`)"
-      traefik.http.routers.teslamate-ws.entrypoints: "websecure"
-      traefik.http.routers.teslamate-ws.tls: ""
       traefik.http.routers.teslamate.rule: "Host(`${FQDN_TM}`)"
       traefik.http.routers.teslamate.middlewares: "teslamate-auth"
       traefik.http.routers.teslamate.entrypoints: "websecure"
@@ -89,7 +86,7 @@ services:
       - teslamate-grafana-data:/var/lib/grafana
     labels:
       traefik.enable: "true"
-      traefik.port: "3000"
+      traefik.http.services.grafana.loadbalancer.server.port: "3000"
       traefik.http.middlewares.redirect.redirectscheme.scheme: "https"
       traefik.http.routers.grafana-insecure.rule: "Host(`${FQDN_TM}`)"
       traefik.http.routers.grafana-insecure.middlewares: "redirect"
@@ -108,21 +105,23 @@ services:
       - mosquitto-data:/mosquitto/data
 
   proxy:
-    image: traefik:v2.7
+    image: traefik:v3.5
     restart: always
     command:
       - "--global.sendAnonymousUsage=false"
       - "--providers.docker"
       - "--providers.docker.exposedByDefault=false"
       - "--entrypoints.web.address=:80"
       - "--entrypoints.websecure.address=:443"
+      - "--entrypoints.websecure.http3.advertisedPort=443"
       - "--certificatesresolvers.tmhttpchallenge.acme.httpchallenge=true"
       - "--certificatesresolvers.tmhttpchallenge.acme.httpchallenge.entrypoint=web"
       - "--certificatesresolvers.tmhttpchallenge.acme.email=${LETSENCRYPT_EMAIL}"
       - "--certificatesresolvers.tmhttpchallenge.acme.storage=/etc/acme/acme.json"
     ports:
       - "80:80"
-      - "443:443"
+      - "443:443/tcp"
+      - "443:443/udp"
     volumes:
       - ./.htpasswd:/auth/.htpasswd
       - ./acme/:/etc/acme/