RudderStack on Docker always returns 404

[omarherri]

I usually don’t post issues because I can figure them out, but this time I’m stuck.

Setup:

• VPS with Docker
• Containers managed via Dokploy (i have multiple services working fine)
• Only issue: RudderStack

Problem:

Whenever I try to access the RudderStack URL (rs.domain.com), I always get 404 page not found. I'm guessing also that RudderStack doesn't serve a "homepage" at / ?

What I’ve tried so far:

• Running the container isolated → still 404
• Sharing it with the Docker network → same result
• Double-checked configs → nothing unusual on Traefik or other services

If anyone has run into RudderStack + Docker and solved this, I’d really appreciate the help.

I'm sharing my docker-compose.yml if needed:

services:
  db:
    image: postgres:15-alpine
    ports:
      - '6432:5432'
    environment:
      - POSTGRES_USER=${DB_USER}
      - POSTGRES_PASSWORD=${DB_PASSWORD}
      - POSTGRES_DB=jobsdb
    shm_size: 128mb
    networks:
      - combind-rudderstack-dqndkq
  backend:
    depends_on:
      - db
      - metrics-exporter
      - d-transformer
    image: rudderlabs/rudder-server:latest
    ports:
      - '8080:8080'
    entrypoint: sh -c '/wait-for db:5432 -- /rudder-server'
    healthcheck:
      test: curl --fail http://localhost:8080/health
      interval: 5s
      timeout: 10s
      retries: 3
    restart: always
    environment:
      - GO_ENV=production
      - JOBS_DB_HOST=db
      - JOBS_DB_USER=${DB_USER}
      - JOBS_DB_PORT=5432
      - JOBS_DB_DB_NAME=jobsdb
      - JOBS_DB_PASSWORD=${DB_PASSWORD}
      - DEST_TRANSFORM_URL=https://rs-transformer.domain.com
      - CONFIG_BACKEND_URL=https://api.rudderstack.com
      - WORKSPACE_TOKEN=${WORKSPACE_TOKEN}
      - STATSD_SERVER_URL=metrics-exporter:9125
      - RSERVER_GATEWAY_WEBHOOK_SOURCE_LIST_FOR_PARSING_PARAMS=Shopify
      - CONFIG_PATH=/app/config/config.yaml
    networks:
      - combind-rudderstack-dqndkq
    labels:
      - traefik.http.routers.combind-rudderstack-dqndkq-27-web.rule=Host(`rs.domain.com`)
      - traefik.http.routers.combind-rudderstack-dqndkq-27-web.entrypoints=web
      - traefik.http.services.combind-rudderstack-dqndkq-27-web.loadbalancer.server.port=8080
      - traefik.http.routers.combind-rudderstack-dqndkq-27-web.service=combind-rudderstack-dqndkq-27-web
      - traefik.http.routers.combind-rudderstack-dqndkq-27-web.middlewares=redirect-to-https@file
      - traefik.http.routers.combind-rudderstack-dqndkq-27-websecure.rule=Host(`rs.domain.com`)
      - traefik.http.routers.combind-rudderstack-dqndkq-27-websecure.entrypoints=websecure
      - traefik.http.services.combind-rudderstack-dqndkq-27-websecure.loadbalancer.server.port=8080
      - traefik.http.routers.combind-rudderstack-dqndkq-27-websecure.service=combind-rudderstack-dqndkq-27-websecure
      - traefik.http.routers.combind-rudderstack-dqndkq-27-websecure.tls.certresolver=letsencrypt
      - traefik.enable=true
  d-transformer:
    depends_on:
      - metrics-exporter
    restart: always
    image: rudderstack/rudder-transformer:latest
    ports:
      - '9090:9090'
    environment:
      - STATSD_SERVER_HOST=metrics-exporter
      - STATSD_SERVER_PORT="9125"
    networks:
      - combind-rudderstack-dqndkq
    labels:
      - traefik.http.routers.combind-rudderstack-dqndkq-28-web.rule=Host(`rs-transformer.domain.com`)
      - traefik.http.routers.combind-rudderstack-dqndkq-28-web.entrypoints=web
      - traefik.http.services.combind-rudderstack-dqndkq-28-web.loadbalancer.server.port=9090
      - traefik.http.routers.combind-rudderstack-dqndkq-28-web.service=combind-rudderstack-dqndkq-28-web
      - traefik.http.routers.combind-rudderstack-dqndkq-28-web.middlewares=redirect-to-https@file
      - traefik.http.routers.combind-rudderstack-dqndkq-28-websecure.rule=Host(`rs-transformer.domain.com`)
      - traefik.http.routers.combind-rudderstack-dqndkq-28-websecure.entrypoints=websecure
      - traefik.http.services.combind-rudderstack-dqndkq-28-websecure.loadbalancer.server.port=9090
      - traefik.http.routers.combind-rudderstack-dqndkq-28-websecure.service=combind-rudderstack-dqndkq-28-websecure
      - traefik.http.routers.combind-rudderstack-dqndkq-28-websecure.tls.certresolver=letsencrypt
      - traefik.enable=true
  metrics-exporter:
    image: prom/statsd-exporter:v0.22.4
    ports:
      - '9102:9102'
    restart: always
    networks:
      - combind-rudderstack-dqndkq
networks:
  combind-rudderstack-dqndkq:
    name: combind-rudderstack-dqndkq
    external: true

[contributor-support]

Thanks for opening this issue! We'll get back to you shortly. If it is a bug, please make sure to add steps to reproduce the issue.

[gitcommitshow]

Hi @omarherri, Are you forwarding requests from 80 port to 8080 port?

image: rudderlabs/rudder-server:latest

ports:
- '8080:8080'

You're running the rudder-server on 8080 port. So you will need to either access it at your-self-hosted-server-address:8080 or reverse proxy the requests from port 80 to 8080 and then you can access it at your-self-hosted-server-address.

Here's what I suggest

1. Try running curl http://localhost:8080/health from the server itself first to ensure the server is running.
2. If it is running. Then the issue is related to networking only, make sure your machine and the port (whichever you want 80 or 8080) is publically accessible.

[omarherri]

What I’m really doing with Traefik is loading requests to port 8080:
traefik.http.services.combind-rudderstack-dqndkq-27-websecure.loadbalancer.server.port=8080

I checked if the service is running. It’s only accessible inside the container, but from outside the container it’s not reachable.

Interesting fact: the d-transformer service works correctly and is reachable.

[gitcommitshow]

I do not understand traffic configs but from your response I understand that you are using it correctly to forward requests from port 80 to port 8080, and you have probably verified that any request to http://rs.domain.com reaches your traefik service (check its logs). Is that the case?

What do you see when you run these command?

curl http://rs.domain.com/health
curl http://rs.domain.com:8080/health

[omarherri]

Thank you for taking the time to answer me.
Both URLs return a 404 error, which is the typical response from Traefik when it can’t resolve the URL—either because the port is misconfigured or the container isn’t running.

In the logs i'm getting those lines at the end:

2025-09-18T12:22:57.180Z	INFO	runner.warehouse.api	api/http.go:162	waiting for BackendConfig before starting	{"port": 8082}
2025-09-18T12:22:57.180Z	INFO	runner.warehouse.api	api/http.go:143	Starting warehouse master service	{"port": 8082}
2025-09-18T12:22:57.202Z	INFO	runner.warehouse.source	source/source.go:154	starting source jobs processing

If anyone has a working docker-compose.yml file to share, that would be awesome.

[gitcommitshow]

This works for me - https://github.com/rudderlabs/rudder-server/blob/master/rudder-docker.yml

Can you please share output for following commands from your server

docker ps
curl http://localhost:8080/health

[omarherri]

Unfortunately, this example doesn’t use Traefik as a reverse proxy. I am using a reverse proxy, so localhost doesn’t point to my RudderStack instance. Traefik lets me route requests to multiple containers and assign domains to them. That’s what I’m doing with my other services. For this reason, using localhost:8080 on the host machine doesn’t work. If anyone has a Docker Compose setup with a reverse proxy, that would help me more.

[gitcommitshow]

Try asking on https://github.com/traefik/traefik/issues
The docker config I shared, will expose the rudder-server on 8080 port (or anything else if you change the config), you now want to route the incoming public traffic from a specific domain (rs.domain.com) and port 80/443 to the localhost port 8080.

[gitcommitshow]

@omarherri were you able to configure the reverse proxy?