# Disable certResolver with flag?

**URL:** <https://community.traefik.io/t/disable-certresolver-with-flag/20088>\
**Category:** Traefik v3 (latest)\
**Tags:** letsencrypt-acme\
**Created:** [October 6, 2023, 12:26am UTC](https://community.traefik.io/t/disable-certresolver-with-flag/20088 "2023-10-06T00:26:55Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![ToryBerra](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/toryberra/32/7683_2.png) [@ToryBerra](https://community.traefik.io/u/ToryBerra)\
**Post date:** [October 6, 2023, 12:26am UTC](https://community.traefik.io/t/disable-certresolver-with-flag/20088/1 "2023-10-06T00:26:55Z")

</div>

I was wondering if I could disable LetsEncrypt and instead user Traefik internal certs when I am developing locally. Is this possible with a flag?

I am using DockerCompose.

```auto
traefik:
  image: "traefik:v3.0.0-beta3"
  container_name: "traefik"
  command:
    - "--log.level=${TRAEFIK_LOGLEVEL}"
    - "--providers.docker=true"
    - "--providers.docker.exposedbydefault=false"
    - "--entrypoints.web.address=:80"
    - "--entrypoints.websecure.address=:443"
    - "--entrypoints.postgres.address=:5432"
    - "--entrypoints.web.http.redirections.entrypoint.to=websecure"
    - "--entrypoints.web.http.redirections.entrypoint.scheme=https"
    - "--certificatesresolvers.myresolver.acme.tlschallenge=true"
    - "--certificatesresolvers.myresolver.acme.email=${ACME_EMAIL}"
    - "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
  ports:
    - "80:80"
    - "443:443"
    - "5432:5432"
  volumes:
    - "/var/run/docker.sock:/var/run/docker.sock:ro"
    - "./letsencrypt:/letsencrypt"
  networks:
    - traefiknet

```

---

<div class="post-metadata">

**Author:** ![ToryBerra](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/toryberra/32/7683_2.png) [@ToryBerra](https://community.traefik.io/u/ToryBerra)\
**Post date:** [October 6, 2023, 12:50am UTC](https://community.traefik.io/t/disable-certresolver-with-flag/20088/2 "2023-10-06T00:50:05Z")

</div>

Is setting certresolver to null is a good solution?

```auto
whoami:
  image: traefik/whoami
  command:
    - --port=2001
    - --name=myapp
  restart: always
  labels:
    - "traefik.enable=true"
    - "traefik.http.routers.myapp.entrypoints=websecure"
    - "traefik.http.routers.myapp.service=myapp-service"
    - "traefik.http.services.myapp-service.loadbalancer.server.port=2001"
    - "traefik.http.routers.myapp.tls=true"
    # Setting TRAEFIK_SERVICES_CERTRESOLVER (certresolver) to null disables LetsEncrypt? <----------
    - "traefik.http.routers.myapp.tls.certresolver=${TRAEFIK_SERVICES_CERTRESOLVER}"
  networks:
    - traefiknet

```

---

<div class="post-metadata">

**Author:** ![bluepuma77](https://avatars.discourse-cdn.com/v4/letter/b/a9adbd/32.png) [@bluepuma77](https://community.traefik.io/u/bluepuma77)\
**Post date:** [October 6, 2023, 6:24am UTC](https://community.traefik.io/t/disable-certresolver-with-flag/20088/3 "2023-10-06T06:24:59Z")

</div>

You can declare the certresolver, just not assign it. We assign the certresolver globally on entrypoint.

You could try to use an env var and set it to certresolver name or empty string.

You probably need to set TLS=true for Traefik to create custom certs. I would expect this can always be set, with and without LE, but you need to test.

---

<div class="post-metadata">

**Author:** ![ToryBerra](https://sea2.discourse-cdn.com/flex020/user_avatar/community.traefik.io/toryberra/32/7683_2.png) [@ToryBerra](https://community.traefik.io/u/ToryBerra)\
**Post date:** [October 6, 2023, 12:31pm UTC](https://community.traefik.io/t/disable-certresolver-with-flag/20088/4 "2023-10-06T12:31:42Z")

</div>

Thank you. Can you show me how to set global cert resolver using my docker-compose example above?

---

<div class="post-metadata">

**Author:** ![bluepuma77](https://avatars.discourse-cdn.com/v4/letter/b/a9adbd/32.png) [@bluepuma77](https://community.traefik.io/u/bluepuma77)\
**Post date:** [October 6, 2023, 12:36pm UTC](https://community.traefik.io/t/disable-certresolver-with-flag/20088/5 "2023-10-06T12:36:00Z")

</div>

Check [simple Traefik example](https://github.com/bluepuma77/traefik-best-practice/tree/main/docker-traefik-dashboard-letsencrypt).

Maybe try something like:

```auto
    command:
      - ...
      - --entrypoints.websecure.http.tls=true
      - --entrypoints.websecure.http.tls.certresolver=${myresolver}
      - ...

```