Hello, I recently installed two new internal PowerDNS servers that resolve my public domain zone to private IP addresses, while (only) some of the records are publicly resolved to the NAT IP address on the firewall. My problem is that with this setup, even tho the public zone exist in the DNS prov…

You need to add public DNS servers to your cert resolver configuration. This works in my environment with pihole and unbound internal DNS resolvers. Sorry for formatting as I'm on mobile and can't get spacing correct certificatesResolvers: letsEncrypt: acme: caServer: "https://acme-v02…

Hey @Zanathoz Thanks for the info, it sure worked like a charm... Didn't know the resolvers option existed, nor that it was necessary since I did already specified an external provider (Hetzner in this case) that is simply not available under my private DNS servers. I guess Træfik it's intelligen…

Cannot issue SSL certificate with DNS-01 challenge with internal DNS servers

Traefik Traefik v2

system Closed August 5, 2022, 11:23am 5

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
Traefik with Hetzner DNS to get valid ssl certificate for a local network service Traefik v3 (latest) docker , letsencrypt-acme	5	579	January 15, 2026
Traefik with letsencrypt and self hosted DNS Traefik v3 (latest) docker , letsencrypt-acme	4	3330	March 15, 2024
DNS Challenge Resolution Issue Traefik v3 (latest) docker , letsencrypt-acme	9	1311	June 6, 2024
Resolvers for Let's Encrypt DNS-01 challenge are not used Traefik v2 docker , file , letsencrypt-acme	14	2224	September 29, 2024
lets encrypt certificates with traefik and local dns Traefik letsencrypt-acme	0	146	December 20, 2025

Cannot issue SSL certificate with DNS-01 challenge with internal DNS servers

Related topics