On the kubernets side I have ingress and ingressroute set up on EKS. With Traefik.
The services indeed uses ELB.'

Yes it seems so

Yes looks great, thanks!
First thing though is I am going put it behind an nginx-proxy because there seems to be no ACL

Question, I see at the end of the docker-compose file:
networks:
backend:
driver: bridge
I want to change it to:

networks:
default:
external:
name: nginx-proxy

Will that break it?

Because I need it on the same network to go in the reverse proxy

Happend again after restarting the container.

Where does one add apiserver.elastic.upgrade_monitoring.v16_migration_verification flag set to false?

Ok - how do I set the API server to a on the web-UI to a different path? Because the api-server needs to be also https, you can't mix calls

Needs quotes:
ERROR: The Compose file './docker-compose.yml' is invalid because:
services.apiserver.environment.TRAINS__APISERVER__ELASTIC__UPGRADE_MONITORING__V16_MIGRATION_VERIFICATION contains false, which is an invalid type, it should be a string, number, or a null

Does not work with domain name:
Blocked: The Same Origin Policy disallows reading the remote resource at http://trains.shapedo.com:8008/v2.9/users.get_current_user

Ok, running now from:
https://trains.shapedo.com/dashboard

When the DNS populates it will also have letsencrypt sign it. so I have https and a password protected login

ah no, same issue with IPS:
Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at http://108.128.174.211:8008/v2.9/auth.fixed_users_mode .

Investigating

Thanks!