Reverse Proxy Flow Mapper

Paste nginx.conf or Traefik labels. See routing flow and audit findings.

๐Ÿ• Cron Builder & Visualiser Visualize job overlaps ๐Ÿ”’ SSL Checker Check cert expiry ๐Ÿณ Docker Auditor Audit compose files ๐Ÿ›ก๏ธ Firewall Auditor Audit UFW rules ๐Ÿ”€ Reverse Proxy Mapper Map routing & audit

Paste nginx.conf or docker-compose with Traefik labels, then click Map flow.

How It Works

1. Paste

Paste your nginx.conf or docker-compose.yml with Traefik labels. The tool auto-detects which format you're using.

2. Map

Click Map flow. Optionally enter a test URL to see which routing rule would match it.

3. Audit

Review findings for dangling routers, missing SSL redirects, localhost proxy_pass and exposed admin routes. Nothing leaves your browser.

Frequently Asked Questions

Does this support Caddy or Apache?

Currently this tool supports nginx.conf files and docker-compose.yml files with Traefik labels. Caddy and Apache support may be added in future.

What is a dangling Traefik router?

A dangling router is a Traefik router label that references a service name that does not exist in your compose file. Traffic matching that router has nowhere to go and will result in a 404 or gateway error.

What does missing SSL redirect mean?

If your nginx config has a server block listening on port 80 but no return 301 https:// redirect, users who visit via HTTP are never forced to the secure version.

Why should proxy_pass not use localhost?

Inside Docker, containers communicate by service name, not localhost. Using proxy_pass http://localhost:3000 inside a container means it is trying to reach itself, not the target service.

Does this tool send my config anywhere?

No. All parsing and analysis runs entirely in your browser. Your nginx or Traefik config is never sent to or stored on any ConfigClarity server.