Bad certificate

Traefik Traefik v2
,
1

Hi,
Since today I can't connect to my web sites.
Docker 20.10.0
Traefik 2.2.

Web pages were just black. I then realized that my public IP had changed so I updated my domain name.
I renewed the letsencrypt certificate by deleting letsencrypt/acme.json and restarting traefik.
Now when I connect, the site is giving a certificate from my ISP.
I tried a lot of things but nothing works.
I'm a noob in traefik and configuring it was a pain but it was working good.
Here are my configs:
docker-compose.yml

version: "3.3"

networks:
  traefik:
    external: true


services:

  traefik:
    image: "traefik:v2.2"
    container_name: "traefik"
    command:
      - "--api.insecure=true"
      - "--providers.docker=true"
      - "--providers.docker.exposedbydefault=false"
      - "--providers.docker.watch=true"
      - "--providers.file=true" 
      - "--providers.file.filename=/etc/traefik/rules.toml"
      - "--providers.file.watch=true"
      - "--entryPoints.web.address=:80"
      - "--entryPoints.websecure.address=:443"
      - "--entryPoints.web.http.redirections.entryPoint.to=websecure"
      - "--entryPoints.web.http.redirections.entryPoint.scheme=https"
      - "--certificatesresolvers.myresolver.acme.dnschallenge=true"
      - "--certificatesresolvers.myresolver.acme.dnschallenge.provider=ovh"
      - "--certificatesresolvers.myresolver.acme.dnschallenge.delayBeforeCheck=10"
      - "--certificatesresolvers.myresolver.acme.email=exampl@gmail.com"
      - "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
    ports:
      - "80:80"
      - "443:443"
      - "8080:8080"
    environment:
      - "TZ=Europe/Paris"
      - "OVH_ENDPOINT=ovh-eu"
      - "OVH_APPLICATION_KEY=################"
      - "OVH_APPLICATION_SECRET=######################"
      - "OVH_CONSUMER_KEY=#########################""
    volumes:
      - "/media/2TO/AppData/traefik/conf/cert:/cert"
      - "/media/2TO/AppData/traefik/conf/letsencrypt:/letsencrypt"
      - "/var/run/docker.sock:/var/run/docker.sock:ro"
      - "/media/2TO/AppData/traefik/conf/rules.toml:/etc/traefik/rules.toml" 
   
    labels:
      - traefik.enable=false

    networks:
      - traefik

    restart: always

traefik.yml:

api:
  dashboard: true

entryPoints:
  web:
    address: ":80"
  websecure:
    address: ":443"

providers:
  docker:
     endpoint: "unix:///var/run/docker.sock"
#     endpoint: "tcp://127.0.0.1:2375"
     watch: true    
     exposedByDefault: false

certificatesResolvers:
  http:
    acme:
      email: example@gmail.com
      storage: acme.json
      httpChallenge:
        entryPoint: web

And here is my airsonic docker-compose.yml:

version: "2"
services:
  airsonic:
    image: linuxserver/airsonic
    container_name: airsonic
    environment:
      - PUID=1000
      - PGID=100
      - TZ=Europe/Paris
      - JAVA_OPTS=-Dserver.use-forward-headers=true      
    volumes:
      - /media/2TO/AppData/airsonic:/config
      - /media/nfsnas/Partage/Medias/Musique_320:/music
      - /media/2TO/MEDIA/MUSIQUE/Playlists:/playlists
      - /media/2TO/MEDIA/MUSIQUE/Podcasts:/podcasts
    ports:
      - 4040:4040
    labels:
      - "traefik.enable=true"
      - "traefik.docker.network=traefik"
      - "traefik.http.routers.airsonic.entrypoints=web"
      - "traefik.http.routers.airsonic.rule=Host(`music.example.com`)"
      - "traefik.http.middlewares.https-redirect.redirectscheme.scheme=https"
      - "traefik.http.routers.airsonic.middlewares=https-redirect"

      - "traefik.http.routers.airsonic-secure.entrypoints=websecure"
      - "traefik.http.routers.airsonic-secure.rule=Host(`music.example.com`)"
      - "traefik.http.routers.airsonic-secure.tls=true"
      - "traefik.http.routers.airsonic-secure.tls.certresolver=myresolver"
      
      - "traefik.http.middlewares.airsonic_auth.basicauth.users=#############################################"."
      - "traefik.http.routers.airsonic-secure.middlewares=airsonic_auth@docker"
      - "traefik.http.routers.airsonic-secure.service=airsonic"
      - "traefik.http.services.airsonic.loadbalancer.server.port=4040"

    networks:
      - traefik
      - default
    restart: always

networks:
  traefik: # this is the network provided by traefik
    external:
      name: traefik
  default: # your database should be in this network
2

If your public ip is directing to somewhere other than your router/pc then you need to talk to your ISP.

3

Also I have this in the traefik logs:

time="2020-12-16T18:01:01+01:00" level=error msg="close tcp [::]:443: use of closed network connection" entryPointName=websecure


time="2020-12-16T18:01:01+01:00" level=error msg="accept tcp [::]:443: use of closed network connection" entryPointName=websecure


time="2020-12-16T18:01:01+01:00" level=error msg="accept tcp [::]:80: use of closed network connection" entryPointName=web


time="2020-12-16T18:01:01+01:00" level=error msg="close tcp [::]:80: use of closed network connection" entryPointName=web


time="2020-12-16T18:01:01+01:00" level=error msg="accept tcp [::]:8080: use of closed network connection" entryPointName=traefik


time="2020-12-16T18:01:01+01:00" level=error msg="close tcp [::]:8080: use of closed network connection" entryPointName=traefik


time="2020-12-16T18:01:05+01:00" level=info msg="Configuration loaded from flags."
4

My public IP is ok. The cert is from my router.
Also if I check with: https://www.sslshopper.com/ssl-checker.html , they say that's ok, they see letsencrypt cert..
Of course I tried with different browsers, cleaning cache etc...

5

Are you trying the domain name from behind your router that the domain name points to?

6

Solved. (Sort of)
The problem is definitely from an update of my router:

Sorry.
Thanks a lot!