Complex configuration assistance

Hey, I need some help with the configuration, if anyone could help.

I have three domains, two of them need to get certificates from LetsEncrypt (CloudFlare DNS-01 challenge), the last one is a self-signed wildcard cert (internal domain).
The self-signed certificate is provided from a file (Docker volume).
I want use the Consul KV storage provider, where the acme data can be stored, the config is a read-only file provided by Docker (so no need to store that in Consul).
I want use the Consul Catalog provider, as all my services are registered with Consul, and I'd like to tell Traefik which domain(s) to proxy the service on from the tags.

There's a lot of pieces to this puzzle, some of them I sort-of figured out how to do, but not all of them combined (multiple domains, tags to differentiate etc).
Obviously this is using Traefik 1.7, and 2.0 is (currently) out of the question due to the lack of Consul support (please don't let it die!).

Any help would be much appreciated.

I have a similar requirement but with a client provided certificate. Did you get this to work? Can you share some details?