# After moving everything to an another machine, unable to connect or 404 **URL:** \ **Category:** Traefik v1\ **Tags:** docker\ **Created:** [December 6, 2019, 1:58am UTC](https://community.traefik.io/t/after-moving-everything-to-an-another-machine-unable-to-connect-or-404/3313 "2019-12-06T01:58:14Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![jtagcat](https://avatars.discourse-cdn.com/v4/letter/j/ac91a4/32.png) [@jtagcat](https://community.traefik.io/u/jtagcat)\ **Post date:** [December 6, 2019, 1:58am UTC](https://community.traefik.io/t/after-moving-everything-to-an-another-machine-unable-to-connect-or-404/3313/1 "2019-12-06T01:58:14Z")
I started out with [DigitalOcean's guide](https://www.digitalocean.com/community/tutorials/how-to-use-traefik-as-a-reverse-proxy-for-docker-containers-on-centos-7). Everything was working (even between reboots), I have moved everything to an another machine before, but this time everything is unable to connect and sometimes 404. I have traefik.domain.tld pointed at the machine for about a week now. Opening it should get me the dashboard, but even that doesn't work. start.sh ```auto docker run -d \ -v /var/run/docker.sock:/var/run/docker.sock \ -v $PWD/traefik.toml:/traefik.toml \ -v $PWD/acme.json:/acme.json \ -p 80:80 \ -p 443:443 \ -l traefik.frontend.rule=Host:traefik.domain.tld \ -l traefik.port=8080 \ --network web \ --name traefik \ --restart always \ traefik:latest ``` traefik.toml ```auto defaultEntryPoints = ["http", "https"] [entryPoints] [entryPoints.dashboard] address = ":8080" [entryPoints.dashboard.auth] [entryPoints.dashboard.auth.basic] users = ["admin:passwdhashere"] [entryPoints.http] address = ":80" [entryPoints.http.redirect] entryPoint = "https" [entryPoints.https] address = ":443" [entryPoints.https.redirect] regex = "^https://www.(.*)" replacement = "https://$1" permanent = true [entryPoints.https.tls] compress = true [api] entrypoint="dashboard" [acme] email = "acme@my.email" storage = "acme.json" entryPoint = "https" onHostRule = true [acme.httpChallenge] entryPoint = "http" [docker] watch = true network = "web" #[file] # directory = "/conf/" # watch = true ``` Centos 7, same as the previous vm. It seems that traefik is bootlooping. ```auto $ docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES bdb97bf9132d traefik:latest "/entrypoint.sh tr..." 3 days ago Restarting (1) 19 hours ago traefik $ docker restart traefik dtraefik $ docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES bdb97bf9132d traefik:latest "/entrypoint.sh tr..." 3 days ago Up Less than a second 0.0.0.0:80->80/tcp, 0.0.0.0:443->443/tcp traefik $ docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES bdb97bf9132d traefik:latest "/entrypoint.sh tr..." 3 days ago Restarting (1) 2 seconds ago traefik $ docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES bdb97bf9132d traefik:latest "/entrypoint.sh tr..." 3 days ago Restarting (1) 4 seconds ago traefik $ docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES bdb97bf9132d traefik:latest "/entrypoint.sh tr..." 3 days ago Restarting (1) 5 seconds ago traefik $ docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES bdb97bf9132d traefik:latest "/entrypoint.sh tr..." 3 days ago Restarting (1) 5 seconds ago traefik $ docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES bdb97bf9132d traefik:latest "/entrypoint.sh tr..." 3 days ago Restarting (1) 6 seconds ago traefik $ docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES bdb97bf9132d traefik:latest "/entrypoint.sh tr..." 3 days ago Restarting (1) Less than a second ago traefik $ docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES bdb97bf9132d traefik:latest "/entrypoint.sh tr..." 3 days ago Restarting (1) 1 second ago traefik $ ``` ---
**Author:** ![dduportal](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/dduportal/32/4_2.png) [@dduportal](https://community.traefik.io/u/dduportal)\ **Post date:** [December 6, 2019, 9:19am UTC](https://community.traefik.io/t/after-moving-everything-to-an-another-machine-unable-to-connect-or-404/3313/2 "2019-12-06T09:19:25Z")
@jtagcat, as this is related to Traefik v1.x, are you able to move the topic to the section "Traefik v1" ? In order for us to help, can you provide the logs from Traefik's container? As it is restarting in loop, it means there is a fatal error happening, and having it could help a lot to understand ---
**Author:** ![jtagcat](https://avatars.discourse-cdn.com/v4/letter/j/ac91a4/32.png) [@jtagcat](https://community.traefik.io/u/jtagcat)\ **Post date:** [December 6, 2019, 12:16pm UTC](https://community.traefik.io/t/after-moving-everything-to-an-another-machine-unable-to-connect-or-404/3313/3 "2019-12-06T12:16:47Z")
Getting `command traefik error: stat /traefik.toml: permission denied` I tried changing the ownership to me, having 600 and 777, ---
**Author:** ![dduportal](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/dduportal/32/4_2.png) [@dduportal](https://community.traefik.io/u/dduportal)\ **Post date:** [December 6, 2019, 1:02pm UTC](https://community.traefik.io/t/after-moving-everything-to-an-another-machine-unable-to-connect-or-404/3313/4 "2019-12-06T13:02:40Z")
> [@jtagcat](#): > > I tried changing the ownership to me, having 600 and 777, Did it work? If no, what is the result of: ```bash docker run -ti \ -v /var/run/docker.sock:/var/run/docker.sock \ -v $PWD/traefik.toml:/traefik.toml \ -v $PWD/acme.json:/acme.json \ -p 80:80 \ -p 443:443 \ -l traefik.frontend.rule=Host:traefik.domain.tld \ -l traefik.port=8080 \ --network web \ --name traefik \ --restart always \ --entrypoint=ls \ traefik:latest \ -l /traefik.toml ``` and ```bash docker run -ti \ -v /var/run/docker.sock:/var/run/docker.sock \ -v $PWD/traefik.toml:/traefik.toml \ -v $PWD/acme.json:/acme.json \ -p 80:80 \ -p 443:443 \ -l traefik.frontend.rule=Host:traefik.domain.tld \ -l traefik.port=8080 \ --network web \ --name traefik \ --restart always \ --entrypoint=cat \ traefik:latest \ /traefik.toml ``` ? ---
**Author:** ![jtagcat](https://avatars.discourse-cdn.com/v4/letter/j/ac91a4/32.png) [@jtagcat](https://community.traefik.io/u/jtagcat)\ **Post date:** [December 6, 2019, 1:37pm UTC](https://community.traefik.io/t/after-moving-everything-to-an-another-machine-unable-to-connect-or-404/3313/5 "2019-12-06T13:37:03Z")
chmoding didn't work First: `ls: /traefik.toml: Permission denied` Second: `cat: can't open '/traefik.toml': Permission denied` I also tried deleting the file and creating it again. If I start it without traefik.toml, it creates a directory traefik.toml. ---
**Author:** ![dduportal](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/dduportal/32/4_2.png) [@dduportal](https://community.traefik.io/u/dduportal)\ **Post date:** [December 6, 2019, 1:49pm UTC](https://community.traefik.io/t/after-moving-everything-to-an-another-machine-unable-to-connect-or-404/3313/6 "2019-12-06T13:49:23Z")
Does it work if you disable (temporarily) apparmor, restart docker engine and re-try? ---
**Author:** ![jtagcat](https://avatars.discourse-cdn.com/v4/letter/j/ac91a4/32.png) [@jtagcat](https://community.traefik.io/u/jtagcat)\ **Post date:** [December 6, 2019, 3:18pm UTC](https://community.traefik.io/t/after-moving-everything-to-an-another-machine-unable-to-connect-or-404/3313/7 "2019-12-06T15:18:44Z")
Disabling SELinux got me outputs, but still nothing on traefik.domain.tld. I installed httpd for a moment and that works - firewall shouldn't have issues. First: ```auto -rwxrwxrwx 1 1000 1000 829 Dec 6 13:31 /traefik.toml ``` (traefik.toml is currently still 777) Second: ```auto defaultEntryPoints = ["http", "https"] [entryPoints] [entryPoints.dashboard] address = ":8080" [entryPoints.dashboard.auth] [entryPoints.dashboard.auth.basic] users = ["admin:mypasswdhash"] [entryPoints.http] address = ":80" [entryPoints.http.redirect] entryPoint = "https" [entryPoints.https] address = ":443" [entryPoints.https.redirect] regex = "^https://www.(.*)" replacement = "https://$1" permanent = true [entryPoints.https.tls] compress = true [api] entrypoint="dashboard" [acme] email = "acme@my.email" storage = "acme.json" entryPoint = "https" onHostRule = true [acme.httpChallenge] entryPoint = "http" [docker] watch = true network = "web" #[file] # directory = "/conf/" # watch = true ``` I'd note that I didn't know, that I was on Traefik v1, not v2. I'm ok migrating to v2, if there's any guide/help on setting up v2 (DigitalOcean would be great, but they only have a guide on v1). ---
**Author:** ![jtagcat](https://avatars.discourse-cdn.com/v4/letter/j/ac91a4/32.png) [@jtagcat](https://community.traefik.io/u/jtagcat)\ **Post date:** [December 17, 2019, 11:49am UTC](https://community.traefik.io/t/after-moving-everything-to-an-another-machine-unable-to-connect-or-404/3313/8 "2019-12-17T11:49:15Z")
On the next vm, fresh install again everything just works. Quite confused. ---
**Author:** ![Wave6677](https://avatars.discourse-cdn.com/v4/letter/w/c0e974/32.png) [@Wave6677](https://community.traefik.io/u/Wave6677)\ **Post date:** [August 2, 2023, 9:24pm UTC](https://community.traefik.io/t/after-moving-everything-to-an-another-machine-unable-to-connect-or-404/3313/9 "2023-08-02T21:24:51Z")
I know this is an ancient post, but I was facing a similar error. I had `command traefik error: stat /etc/traefik/traefik.yml: permission denied`, and am using Rocky Linux 9 with SELinux. The solution I found after a while is as follows (copied from an IRC chatroom) Explaination of how it happened- This error occurs when SELinux is added to the docker daemon, enabling SELinux protections over docker containers. Typically this is done by creating the file/adding `Line 1: { Line 2: "selinux-enable": true Line 3: }` to `/etc/docker/daemon.json` Personally I did this for Mailcow, but it's also generally recommended if you're using an SELinux distro. It makes it so any file or directory without the label `svirt_sandbox_file_t` can't be read or written to from docker containers, even when mounted, unless they're privledged (which is bad for your security. SOLUTION- `sudo chcon -Rt svirt_sandbox_file_t $YOUR_CONTAINER_DIRECTORY (ex: /opt/appdata/traefik)` Only run that commend on a directory/file you KNOW you want to be able to access from docker, you don't want to give it access to something like "/" because then you negate the point of having SELinux.