Explain this to me like I'm 5 - Internal Cert being ignored - unable to setup

Traefik Traefik v3 (latest)
1

I'm not using docker, and have no idea how to figure that out, so I'm running an LXC in ProxMox.

My domain is wildcard flushed through a cloudflared tunnel, all using this scripting setup:

I am attempting to run nexcloud onsite and it needs to be redirected

in my traefik.yml i have:

serverTransport:
insecureSkipVerify: true

still receiving error

2026-07-30T16:59:24-04:00 ERR 500 Internal Server Error error="tls: failed to verify certificate: x509: cannot validate certificate for 10.0.0.172 because it doesn't contain any IP SANs"

I have no Idea how to tell it to HEY IGNORE THAT

Also am I supposed to set these things up as "routers?"

see my config below for the service:

GNU nano 8.4 nexcloud.yml
http:
routers:
nexcloud:
rule: "Host(cloud.XXXXX.com)"
entryPoints:

  • http
  • https
    service: nexcloud
    middlewares:
  • security-headers-nexcloud

middlewares:
security-headers-nexcloud:
headers:
sslRedirect: true
frameDeny: true
contentTypeNosniff: true
browserXssFilter: true

services:
nexcloud:
loadBalancer:
servers:

serversTransport:
insecureSkipVerify: true

what is the right way to do this?

hlep

2

I think the software is only recommended for people 18+ :sweat_smile:

Use 3 backticks before and after config to preserve spacing and make it more readable.

Wildcards are only available with Traefik dnsChallenge. Have you checked the other sibling repositories?

3

I have NO idea, I've been poking in the dark, I am already 37 trying to figure this out,

Traefk seemed to like a generic config but I got 404'd

http:
  routers:
    router:
      entryPoints:
      - https
      rule: Host(`cloud.xx.com`)
      service: router

  services:
    router:
      loadBalancer:
        serversTransport: routerTransport
        servers:
          - url: https://10.0.0.15/

  serversTransports:
    routerTransport:
      insecureSkipVerify: true