ACME Default Certificate does not work

Traefik Traefik v2
,
1

I have set up a default certificate as described in the docs. But I'm still served with the TRAEFIK DEFAULT CERT when I visit my IP directly without SNI, or an invalid subdomain. What did I do wrong?

Static config:

certificatesResolvers:
  le:
    acme:
      email: "letsencrypt@example.com"
      storage: "acme.json"
      tlsChallenge: {}

tls:
  stores:
    default:
      defaultGeneratedCert:
        resolver: le
        domain:
          main: example.com
          sans:
            - "*.example.com"

No errors in my logs.
level=info msg="Configuration loaded from file: /traefik.yml"

2

You use tlsChallenge, but for wildcard TLS certs you need to use dnsChallenge.