I am quite new to traefik and followed some helpful guides to build a new docker swarm starting with traefik and portainer on the manager node, secured with LE certificates. After deploying the stacks for traefik and portainer, accessing the websites for traefik dashboard and portainer works. But …

Welcome to the forum @qroac Your portainer service has multiple networks. [image] Docker container does not register right / not available if access too early Welcome to the forum @prodigy7 You have multiple networks in both service. You need to configure traefik as to which network t…

Thank you. I have traefik configured in traefik.yml to use the network "webproxy". The second portainer network is for communication with the portainer agents. Communication of traefik with portainer works, as I can access the website. Just without LE certificate.

I suggest you go reread the linked post and the parameters that it links to. The timeout issue is indicative of the portainer router being connected to two networks. I experienced it myself this week when I mistyped traefik in the traefik.docker.network label.

I didn't know that from the docs. Thanks for the hint. However, it sadly didn't change anything. I added "traefik.docker.network=webproxy" to portainers deploy.labels. traefik.yml already contains provider.docker.networks: webproxy Log output after removing both stacks and redeploying stays the …

It is likely due to inter-container networkingthen . The pastebin did not have traefik.docker.network defined, but good that it is there. You may need to look further into that webproxy network, ensure both containers are actually connected to it. As they are in separate compose files and the net…

docker network inspect webproxy confirmed there are 3 members in the network. The container for traefik and portainer and a webproxy-endpoint. I can also reach the portainer interface on https by accepting the TRAEFIK DEFAULT CERT. Executing SH in the traefik container I am further able to ping th…

[image] qroac: Another question for my understanding: Does the handling of TLS challenges for letsencrypt really depend on containers that use the hostname? Is it not handeled by traefik itself? You're correct it is handled by traefik. [image] qroac: I can also reach the portainer inter…

The container run on a Hetzner Cloud server and I access portainer from my home computer. So Port 80/443 are public accessible. I requested a report for the domain of my portainer instance. The error is very much the same as in the logfile: IssueFromLetsEncrypt ERROR A test authorization for s…

Very strange. I see you have the httpChallenge commented out. Did you try that method without success or try tlsChallenge first?

Yes, I tried httpChallenge first. It results in the following error: traefik_local_main.0.894gjy53z4s7@master | time="2020-07-06T11:30:12+02:00" level=error msg="Unable to obtain ACME certificate for domains "...": unable to generate a certificate for the domains [...]: error: one or more domai…

Error obtaining certificate: Timeout during read

Traefik Traefik v2

cakiwi July 4, 2020, 1:22pm 2

Welcome to the forum @qroac

Your portainer service has multiple networks.

Topic		Replies	Views
Unable to obtain ACME: timeout during connect Traefik v2 docker , letsencrypt-acme	5	4908	January 18, 2021
Kubernetes and Let's Encrypt: Timeout during read (your server may be slow or overloaded) Traefik v2 kubernetes-crd , kubernetes-ingress , letsencrypt-acme	7	1444	October 19, 2020
Certificate problem Traefik v2 docker	0	500	December 2, 2021
Problem getting certs from le from traefik Traefik v2 docker , letsencrypt-acme	1	532	March 2, 2020
Unable to generate a certificate acme: error: 400 :: urn:ietf:params:acme:error:connection :: Timeout during connect Traefik v2 docker-swarm , letsencrypt-acme	0	3047	June 29, 2021

Error obtaining certificate: Timeout during read

Related topics