Splunk-Traefik-with-Root-Endpoint

default.yml

splunk:
  conf:
    web:
      directory: /opt/splunk/etc/system/local
      content:
        settings:
          root_endpoint : /splunk

docker-compose.yml

version: "2.2"

services:

  splunk:
    image: splunk/splunk
    restart: always
    cap_add: ['IPC_LOCK']
    ulimits:
      memlock:
        soft: -1
        hard: -1
      nofile:
        soft: 65536
        hard: 65536
    environment:
      SPLUNK_START_ARGS: "--accept-license"
      SPLUNK_PASSWORD: "changeme"
    volumes:
      - ./default.yml:/tmp/defaults/default.yml
    networks:
      - splunk
    ports:
      - "8000:8000"

  traefik:
    image: "traefik:2.7"
    restart: always
    volumes:
      - ./splunk_dynamic.yml:/etc/traefik/conf/splunk_dynamic.yml:ro
      - ./traefik.yml:/etc/traefik/traefik.yml:ro
    networks:
      - splunk
    ports:
      - "80:80"
      - "443:443"

networks:
  splunk:

splunk_dynamic.yml

http:

  routers:
    splunk:
      entryPoints:
        - websecure
      rule: PathPrefix(`/splunk`)
      service: splunk-service
      tls: {}

  services:
    splunk-service:
      loadBalancer:
        servers:
        - url: "http://splunk:8000"

traefik.yml

entryPoints:
  web:
    address: ":80"
    http:
      redirections:
        entrypoint:
          to: websecure
          scheme: https
  websecure:
    address: ":443"

providers:
  file:
    directory: "/etc/traefik/conf"

log:
  filePath: "/var/log/traefik.json"
  format: json

accessLog:
  filePath: "/var/log/access.log"
  filters:
    statusCodes:
      - "401"