ACME 400 Error: Connection refused - Works using Certbot

Hey, I'm having trouble getting a certificate to work with Traefik. I'm getting this error:

ERR Error renewing certificate from LE: {radsteve.net []} error="error: one or more domains had a problem:\n[radsteve.net] acme: error: 400 :: urn:ietf:params:acme:error:connection :: 79.228.18.221: Connection refused\n" acmeCA=https://acme-v02.api.letsencrypt.org/directory providerName=lets-encrypt.acme

However it works in certbot and Let's Debug says everything is fine.
Here are my configs:

services:
  traefik:
    command:
      - traefik
    environment:
      - PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
    image: traefik:latest
    ports:
      - target: 443
        published: "443"
        protocol: tcp
      - target: 80
        published: "80"
        protocol: tcp
    restart: unless-stopped
    network_mode: host
    volumes:
      - type: bind
        source: ./acme.json
        target: /acme.json
      - type: bind
        source: /var/run/docker.sock
        target: /var/run/docker.sock
      - type: bind
        source: ./traefik.toml
        target: /traefik.toml
      - type: bind
        source: ./traefik_dynamic.toml
        target: /traefik_dynamic.toml

traefik.toml:

[api]
  dashboard = true

[providers.docker]
  watch = true
  network = "web"

[providers.file]
  filename = "traefik_dynamic.toml"

[certificatesResolvers.lets-encrypt.acme]
  email = "radsteve@radsteve.net"
  storage = "acme.json"
  [certificatesResolvers.lets-encrypt.acme.tlsChallenge]

traefik_dynamic.toml:

[http.middlewares.simpleAuth.basicAuth]
  users = [
    "admin:*redacted*"
  ]

[http.routers.api]
  rule = "Host(`admin.radsteve.net`)"
  middlewares = ["simpleAuth"]
  service = "api@internal"

Why those lines? Compare to simple Traefik example.

Enable and check Traefik debug log.

PS: Why TOML, which has so much repetition?