docs: add Traefik reverse-proxy deployment guide

[mfolofy]

Description

Community-contributed guide for deploying Open WebUI behind Traefik v3 reverse proxy.

What's included

• Full Docker Compose setup with Traefik + Open WebUI
• Automatic Let's Encrypt TLS certificate provisioning
• Traefik dashboard with basic auth
• Rate limiting, CORS, and security header configuration
• Ollama sidecar for GPU-accelerated inference
• Troubleshooting table for common issues

Why

This fills a gap in the deployment documentation — Traefik is widely used in production but had no dedicated deployment guide. The previous PRs in the main repo were correctly redirected here by maintainer feedback.

Closes: previous PRs #25492, #25493, #25494, #25582, #25583 (redirected from open-webui/open-webui)

Co-Authored-By: Mike (Claude Code/Banana) noreply@anthropic.com

[Classic298]

Thanks for this, the overall structure and the Traefik/TLS/ACME setup are solid. Closing for now because a few things would mislead readers as published:

• The stack.env block is incorrect. JWT_SECRET is not an Open WebUI variable (it does nothing). The required session secret is WEBUI_SECRET_KEY, which the guide instead comments out and mislabels as "web search". Following it leaves the real key unset, so users get logged out on every restart.
• The WebSocket troubleshooting is wrong. Traefik proxies WebSockets natively; the suggested customrequestheaders.Upgrade=websocket is unnecessary and breaks normal requests.
• The dashboard router is missing TLS (entrypoints=websecure / tls=true / certresolver), so traefik.* falls back to a self-signed cert.

Plus minor nits (filed under External Services rather than deployment, and docker volume rm misses the Compose project prefix).

Happy to merge a revised version with the env block corrected and that WebSocket row dropped, please feel free to reopen or open a fresh PR. Thanks again for contributing!