Traefik is the reverse proxy we use for user-hosted services. Currently, it pulls configuration from the tardis console, and from kubernetes.
It is primarily configured using terraform, here.