Issue: self signed certificate is not getting picked up as i need to use a default certificate for all the incoming traffic for any domain.
Below is the traefik version,
Version: 2.1.4
Codename: cantal
Go version: go1.13.7
Built: 2020-02-06T17:10:06Z
OS/Arch: linux/amd64
In the traefik.toml dynamic configuration below is the configuration,
[tls.stores]
[tls.stores.default]
[tls.stores.default.defaultCertificate]
certFile = "/etc/traefik/conf/cert.crt"
keyFile = "/etc/traefik/conf/cert.key"
ldez
March 2, 2020, 11:55pm
2
Hello,
traefik.toml contains the static configuration.
The dynamic configuration and the static configuration must be defined in separated files:
Thanks for the reply,
In my docker compose
volumes:
- $PWD/traefik.toml:/etc/traefik/traefik.toml
- $PWD/config.yaml:/etc/traefik/config.yaml
- $PWD:/etc/traefik/conf
In my traefik.toml
[providers]
[providers.file]
filename = "/etc/traefik/config.yaml"
watch = true
In the config.yam i have the below,
tls:
certificates:
- certFile: /etc/traefik/conf/cert.crt
keyFile: /etc/traefik/conf/cert.key
stores:
- default
stores:
default:
defaultCertificate:
certFile: /etc/traefik/conf/cert.crt
keyFile: /etc/traefik/conf/cert.key
earlier i had the tls specified in the static file(traefik.toml) now moved it to the dynamic file(config.yaml)
In this correct
Hey @sekar-fa , u can refer to below gist. proxy-config.toml contains dynamic configuration only. it uses both letsencrypt and custom tls certs for two different domains.
docker-compose-traefik.yaml
# Providers :- discover the services that live on your infrastructure (their IP, health, ...)
# Entrypoints :- listen for incoming traffic (ports, ...)
# Routers :- analyse the requests (host, path, headers, SSL, ...). A router is in charge of connecting incoming requests to the services that can handle them.
# Services :- forward the request to your services (load balancing, ...). The Services are responsible for configuring how to reach the actual services that will eventually handle the incoming requests.
# Middlewares :- may update the request or make decisions based on the request (authentication, rate limiting, headers, ...)
version: "3.7"
networks:show original
proxy-config.toml
# ENTRYPOINT / ROUTER
[http.routers]
[http.routers.myrouter]
rule = "Host(`bchain.example.in`)"
middlewares = ["auth"]
service = "goserver"
entryPoints = ["websecure"]
# will route TLS requests (and ignore non tls requests)show original
When i moved the tls entry from static file to dynamic file, it worked.@ldez @metadata
1 Like