404 error when using local DNS

Traefik Traefik v2
1

I'm trying to connect to my services using local DNS addresses (so I don't have to remember ports). This worked fine until v2.2 I think but is now giving me a 404 error page. I'm guessing that it's related to the https redirect but not really sure how to solve the issue.

Log entry:

time="2020-05-29T21:52:58+02:00" level=debug msg="Serving default certificate for request: \"portainer.lan\""
time="2020-05-29T21:52:58+02:00" level=debug msg="http: TLS handshake error from 192.168.1.15:51338: remote error: tls: bad certificate"

My static config

entryPoints:
  http:
    address: ":80"
    http:
      redirections:
        entryPoint:
          to: https
          scheme: https
  https:
    address: ":443"

serversTransport:
  insecureSkipVerify: true

certificatesResolvers:
  cf:
    acme:
      email: my@email.address
      storage: /etc/traefik/acme/acme.json
      dnsChallenge:
        provider: cloudflare

providers:
  docker:
    endpoint: "tcp://proxy_traefik:2375"
    exposedByDefault: false
    watch: true
  file:
    directory: /etc/traefik/dynamic
    watch: true

api:
  dashboard: true
  debug: true

log:
  filePath: /etc/traefik/log/traefik.log
  level: DEBUG

Relevant labels:

    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=web"
      - "traefik.http.routers.portainer.rule=Host(`portainer.${DOMAIN}`)"
      - "traefik.http.routers.portainer.entrypoints=https"
      - "traefik.http.routers.portainer.tls.certresolver=cf"
      - "traefik.http.routers.portainer.middlewares=keycloak@file"
      - "traefik.http.routers.portainerlan.rule=Host(`portainer.lan`)"
      - "traefik.http.routers.portainerlan.entrypoints=http"

I've tried setting the entrypoint for the LAN to https but it doesn't change anything.

2

TLS is not enabled on the portainer router. Specifying certresolver does not inherently enable TLS.

You can set default tls on the entrypoint too. Any tls is configured on the router then none of the default tls applies:

1 Like
3

And now that little oversight has been resolved...