Can't configure custom self-signed TLS cert, traefik returns 404 for every docker service; works with TRAEFIK DEFAULT CERT

Traefik Traefik v1
,
1

Hi there,
I am trying to use custom self-signed certs. I use traefik:1.7.16.
My config looks like this:

# traefik.toml
# defaultEntryPoints must be at the top because it should not be in any table below
defaultEntryPoints = ["http", "https"]

[web] # Port for the status page
  address = ":8080"

[entryPoints]  # Entrypoints, http and https
  [entryPoints.http]
    address = ":80"
    [entryPoints.http.redirect]  # http should be redirected to https
      entryPoint = "https"
  [entryPoints.https]  # https is the default
    address = ":443"
    [entryPoints.https.tls]

[docker]
  endpoint = "unix:///var/run/docker.sock"
  watch = true
  exposedbydefault = false
  swarmmode = false

[providers]
  [providers.file]
    filename = "/etc/traefik/dynamic.toml"

domain = "test" # generated by pre script

# dynamic.toml
[tls.stores]
  [tls.stores.default]
    [tls.stores.default.defaultCertificate]
      certFile = "/etc/tls/traefik.cert"
      keyFile  = "/etc/tls/traefik.key"

# docker-compose.yml
version: '2'

services:
  traefik:
    build: .
    image: traefik
    restart: always
    ports:
      - 80:80
      - 443:443
    networks:
      - docker-net
    labels:
      traefik.enable: "true"
      traefik.port: "8080"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
    container_name: traefik

networks:
  docker-net:
    external:
      name: ${NETWORK_NAME}

# Dockerfile
FROM traefik:1.7.16
EXPOSE 80
EXPOSE 8080
EXPOSE 443
ADD traefik.toml .
ADD dynamic.toml .
ADD traefik.key /etc/tls/traefik.key
ADD traefik.cert /etc/tls/traefik.cert

Don't ask why the Dockerfile is there...

If I comment out [providers] section everything works with TRAEFIK DEFAULT CERT. Once I try to add my cert with providers file, traefik return 404 for everything, still using TRAEFIK DEFAULT CERT. What do I miss?