I successfully use Traefik 3.1.2 configured to serve request for domain01 using DNS challenge with gandi API (with personal access token) .
Part of my configuration :
rule = "Host(`www.domain01`)
...
certResolver = "gandi-resolver"
[[http.routers.www-https.tls.domains]]
main = "domain01"
sans = ["*.domain01"]
and
...
[certificatesResolvers.clairac-fr.acme]
email = "my EMail"
storage = "/etc/traefik/acme/acme.json"
[certificatesResolvers.gandi-resolver.acme.dnsChallenge]
provider = "gandiv5"
delayBeforeCheck = 90
I have a second domain domain02(with gandi and the same account. Token is configured to access both domains) and add to the conf:
rule = "Host(`www.domain02`)"
...
certResolver = "gandi-resolver"
[[http.routers.other-https.tls.domains]]
main = "domain02"
sans = ["*.domain02"]
I have following error:
Unable to obtain ACME certificate for domains
error presenting token: unable to create TXT record for domain domain-02.com and name _acme-challenge: 400: request failed
I add _acme-challenge.domain01CNAME to challenge.domain02as proposed in traefik documentation on Multiple DNS Challenge provider but still have the same error
If someone have an idea to help me.
To be clear:
- domain01and domain02are both managed on Gandi, with 1 account.
- The generated token on gandi have access to both domain configuration
- I have only 1 traefik instance (docker latest => 3.1.2)
- I want to generate wildcard certificate for both domain
Thanks