How to specify certResolver

Traefik Traefik v2 (latest)
,
1

I'm stuck getting my Traefik instance to generate certs (or redirect to HTTPS, but one thing at a time) when viewing view HTTPS.

Here is my attempted config that I believe should be working:

traefik.yml:

entryPoints:
web:
    address: ":80"

  web-secure:
    address: ":443"

  other:
    address: ":9090"

  certificatesResolvers:
    sample:
      acme:
        email: acme@owenimholte.com
        storage: acme.json
        httpChallenge:
        entryPoint: web

http:
  routers:
    engager:
      rule: "Host(`sunkenlighthouse.com`)"
      service: "nginx"
      tls:
          certResolver: sample
     entryPoints:
        - "web-secure"

docker-compose.yml:

nginx:
    image: nginx:latest
    volumes:
      - /Sites/sunkenlighthouse.com:/usr/share/nginx/html
    labels:
      - "traefik.enable=true"

One point I'm not clear about is in the instructions it says to "specify" the certResolver for a given router. This makes sense but the naming is unclear, in the above example would it be "sample" or am I missing the concept? If that were spelled out a bit more in the docs it would be appreciated.

1 Like
2

Hello,

traefik.yml

entryPoints:
  web:
    address: ":80"

  web-secure:
    address: ":443"

  other:
    address: ":9090"

providers:
  docker:
    exposedByDefault: false

certificatesResolvers:
  sample:
    acme:
      email: acme@owenimholte.com
      storage: acme.json
      httpChallenge:
      entryPoint: web

docker-compose.yml:

nginx:
    image: nginx:latest
    volumes:
      - /Sites/sunkenlighthouse.com:/usr/share/nginx/html
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.nginx.rule=Host(`sunkenlighthouse.com`)"
      - "traefik.http.routers.nginx.tls.certResolver=sample"
      - "traefik.http.routers.nginx.entryPoints=web-secure"
3

Thanks very much! Tiny edit, the 2nd label should read ...rule=Host... of course. Thanks!

This has successfully enabled my SSL, I think I can make progress from here. Woohoo!

If I preferred this Nginx biz to be in the Traefik.yml (or another "dynamic" config?), it seems like that should be possible, no?

Not sure why I had so much trouble but one other issue I was having was mapping in an old config file from my previous attempt to get everything working's directory. Cleaning it all up based on your suggestion did the trick. Thanks again!

4

I feel I'm very close but for some reason not able to figure out what the docker service-id/name would be. The obvious answer in this case would be nginx but the server only 404's with the following config:

32%20AM
32%20AM1400×723 138 KB

5

I recommend to use labels instead of file to define routers on container.

Also the file traefik.yml contains the static configuration, so the dynamic configuration must be define in another file and require to enable the file provider.