From 85ac256786a77d0f49b57a1e1284f0eb4268f9f2 Mon Sep 17 00:00:00 2001
From: Xerusion <git@xerusion.me>
Date: Sat, 17 Jan 2026 08:56:47 +0700
Subject: [PATCH] add built in well-known file proxy

---
 docs/deploying/reverse-proxy-traefik.md | 15 +++++++++++++--
 1 file changed, 13 insertions(+), 2 deletions(-)

diff --git a/docs/deploying/reverse-proxy-traefik.md b/docs/deploying/reverse-proxy-traefik.md
index 0805762e..e1edf515 100644
--- a/docs/deploying/reverse-proxy-traefik.md
+++ b/docs/deploying/reverse-proxy-traefik.md
@@ -64,13 +64,24 @@ http:
                 passHostHeader: true
 ```
 ### Federation
+If you will use a .well-known file you can use traefik to redirect .well-known/matrix to tuwunel built-in .well-known file.
+
+replace the rule in either of the methods from
+```
+Host(`your.server.name`)
+```
+to
+```
+Host(`your.tuwunel.domain`) || Host(`your.server.name`) && PathPrefix(`/.well-known/matrix`)
+```
 If you are not using a .well-known file you will need to add and expose port 8448 to a [traefik entrypoint](https://doc.traefik.io/traefik/reference/install-configuration/entrypoints/).
 
 You can then add these to your preferred traefik config method.
+you should replace `matrixfederationentry` with what you named your entrypoint.
 
 Labels:
 ```yaml
-            - "traefik.http.routers.matrix-federation.entrypoints=matrixfederation"
+            - "traefik.http.routers.matrix-federation.entrypoints=matrixfederationentry"
             - "traefik.http.routers.matrix-federation.rule=Host(`your.server.name`)"
             - "traefik.http.routers.matrix-federation.tls=true"
             - "traefik.http.routers.matrix-federation.service=matrix-federation"
@@ -82,7 +93,7 @@ Config file:
         entryPoints:
             - "web"
             - "websecure"
-            - "matrix-federation"
+            - "matrixfederationentry"
 ```
 > [!IMPORTANT]
 >