Explain this to me like I'm 5 - Internal Cert being ignored - unable to setup

Traefik Traefik v3 (latest)
1

I'm not using docker, and have no idea how to figure that out, so I'm running an LXC in ProxMox.

My domain is wildcard flushed through a cloudflared tunnel, all using this scripting setup:

I am attempting to run nexcloud onsite and it needs to be redirected

in my traefik.yml i have:

serverTransport:
insecureSkipVerify: true

still receiving error

2026-07-30T16:59:24-04:00 ERR 500 Internal Server Error error="tls: failed to verify certificate: x509: cannot validate certificate for 10.0.0.172 because it doesn't contain any IP SANs"

I have no Idea how to tell it to HEY IGNORE THAT

Also am I supposed to set these things up as "routers?"

see my config below for the service:

GNU nano 8.4 nexcloud.yml
http:
routers:
nexcloud:
rule: "Host(cloud.XXXXX.com)"
entryPoints:

  • http
  • https
    service: nexcloud
    middlewares:
  • security-headers-nexcloud

middlewares:
security-headers-nexcloud:
headers:
sslRedirect: true
frameDeny: true
contentTypeNosniff: true
browserXssFilter: true

services:
nexcloud:
loadBalancer:
servers:

serversTransport:
insecureSkipVerify: true

what is the right way to do this?

hlep

2

I think the software is only recommended for people 18+ :sweat_smile:

Use 3 backticks before and after config to preserve spacing and make it more readable.

Wildcards are only available with Traefik dnsChallenge. Have you checked the other sibling repositories?

3

I have NO idea, I've been poking in the dark, I am already 37 trying to figure this out,

Traefk seemed to like a generic config but I got 404'd

http:
  routers:
    router:
      entryPoints:
      - https
      rule: Host(`cloud.xx.com`)
      service: router

  services:
    router:
      loadBalancer:
        serversTransport: routerTransport
        servers:
          - url: https://10.0.0.15/

  serversTransports:
    routerTransport:
      insecureSkipVerify: true
4

Thanks for sharing your dynamic config. Best to add static config, too (entrypoints, etc).

Enable Traefik debug log in DEBUG level to get some visibility and whats happening. Also enable Traefik access log in JSON format.