From f03f57980caddca69f8bf5c155390cf5c3d33cfd Mon Sep 17 00:00:00 2001
From: Caleb Doxsey <cdoxsey@pomerium.com>
Date: Tue, 26 May 2020 18:14:11 -0600
Subject: [PATCH] docs: update traefik example and add note about forwarded
 headers (#784)

---
 docs/configuration/readme.md | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/docs/configuration/readme.md b/docs/configuration/readme.md
index 6b82fec92..54ff4081a 100644
--- a/docs/configuration/readme.md
+++ b/docs/configuration/readme.md
@@ -543,15 +543,22 @@ spec:
 
 #### Traefik docker-compose
 
+If the `forward_auth_url` is also handled by Traefik, you will need to configure Traefik to trust the `X-Forwarded-*`
+headers as described in [the documentation](https://docs.traefik.io/v2.2/routing/entrypoints/#forwarded-headers).
+
 ```yml
 version: "3"
 
 services:
   traefik:
-    # The official v2.0 Traefik docker image
-    image: traefik:v2.0
+    # The official v2.2 Traefik docker image
+    image: traefik:v2.2
     # Enables the web UI and tells Traefik to listen to docker
-    command: --api.insecure=true --providers.docker
+    command:
+      - "--api.insecure=true"
+      - "--providers.docker=true"
+      - "--entrypoints.web.address=:80"
+      - "--entrypoints.web.forwardedheaders.insecure=true"
     ports:
       # The HTTP port
       - "80:80"