How to overwrite ACME challenge routing?

Traefik Traefik v3 (latest)
1

Hello,

I am trying to forward all requests on a certain subdomain to my homeserver through rathole. This works quite well, but I run into an issue when the server tries to generate certificates through the ACME challenge as these endpoints are always handled by traefik itself. Is there some way to have it forward requests to well-known/acme?

This is what I have:

  rathole:
    image: rapiz1/rathole:v0.5.0
    hostname: rathole
    networks:
      - traefik
    labels:
      - "traefik.enable=true"
      - "traefik.tcp.routers.home-tunnel.rule=HostSNIRegexp(`^(.+\\.)?b49\\.noteqr\\.de$`)"
      - "traefik.tcp.routers.home-tunnel.entrypoints=websecure"
      - "traefik.tcp.routers.home-tunnel.tls.passthrough=true"
      - "traefik.tcp.routers.home-tunnel.service=home-tunnel-svc"
      - "traefik.tcp.services.home-tunnel-svc.loadbalancer.server.port=5205"


      - "traefik.http.routers.home-tunnel-http.rule=HostRegexp(`^(.+\\.)?b49\\.noteqr\\.de$`)"
      - "traefik.http.routers.home-tunnel-http.entrypoints=web"
      - "traefik.http.routers.home-tunnel-http.service=home-tunnel-http-svc"
      - "traefik.http.services.home-tunnel-http-svc.loadbalancer.server.port=5206"
      - "traefik.http.routers.home-tunnel-http.priority=50000"
    ports:
      - "10.18.7.2:2333:2333" # this is where the client should connect
    volumes:
      - "./rathole.toml:/app/config.toml"
    entrypoint: ["/app/rathole", "--server", "/app/config.toml"]

All requests get forwarded, except for those starting with `http://miniflux.b49.noteqr.de/.well-known/acme-challenge/\`

2

What’s your Traefik static config?

3

I ended up fixing this by just switching to TLS challenges which can be proxied at tcp layer