This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+13 more
Affected surfaces
Summary
AI summaryUpdates New Features, Bug Fixes, and v1.4.0 across a mixed release.
Full changelog
v1.4.0
New Features
-
#60 - Wildcard certificate domains - the add/edit route form now has an optional Wildcard Domains section when TLS is enabled. Add a main domain and SANs (e.g.
*.domain.com) and TM writes thetls.domainsblock to the router config so Traefik can issue wildcard certs via DNS challenge. -
#61 - Static config backup API - new
POST /api/backup/static/createendpoint to trigger an on-demand backup of the static config (traefik.yml). The existingGET /api/backupsendpoint already returns static backups in the list. -
#62 - TLS Options Management - new optional TLS Options tab for managing
tls.optionsprofiles in your dynamic config. Create, edit, and delete named TLS profiles (min/max version, cipher suites, curve preferences, SNI strict, ALPN protocols, client auth). The route form now has a TLS Options Profile selector that writestls.options: <name>to the router config. Toggle the tab via Settings - Interface - TABS. -
#64 - HTTP/3 toggle for entrypoints - the static config entrypoint form now has an Enable HTTP/3 (QUIC) checkbox that writes
http3: {}to the entrypoint config. Pre-fills correctly when editing existing entrypoints. -
#65 - OIDC Auth middleware wizard - new wizard template for the
sevensolutions/traefik-oidc-authplugin. Configure Provider URL, Client ID/Secret, session secret, scopes, session max age, claim-to-header mappings, and bypass authentication rules via a guided form. -
Gatekeeper middleware wizard - added Forward Authorization header checkbox to pass the
Authorizationheader from Gatekeeper to the backend viaauthResponseHeaders. -
Route card layout - entry points, middlewares, and config file badge are now on a single inline row at the bottom of each route card.
Bug Fixes
- #63 - Route Map missing entrypoint middlewares - entrypoint-bound middlewares from the static config are now included in the Route Map topology, matching what the Traefik Dashboard shows.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]