Configure your custom TLS certs in a dynamic config file (docs), load using provider.file in static config traefik.yml.
Enable basic TLS on entrypoint (docs) or on router (docs), just set it to true (command/label) or {} (yml).
Then Traefik will by default "terminate TLS" and forward requests in plain http to the service.