# Https on local network

**URL:** <https://community.traefik.io/t/https-on-local-network/27313>\
**Category:** Traefik v3 (latest)\
**Tags:** docker\
**Created:** [April 25, 2025, 9:13am UTC](https://community.traefik.io/t/https-on-local-network/27313 "2025-04-25T09:13:16Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![naxora](https://avatars.discourse-cdn.com/v4/letter/n/9fc29f/32.png) [@naxora](https://community.traefik.io/u/naxora)\
**Post date:** [April 25, 2025, 9:13am UTC](https://community.traefik.io/t/https-on-local-network/27313/1 "2025-04-25T09:13:16Z")

</div>

Hello,

I just would like to ask for confirmation that my settings are correct.

I have an exist address eg.: **[pfsense.home.foo.com](http://pfsense.home.foo.com)** and traefik created a cert for that. I added a new middleware config:

```auto
http:
  middlewares:
    local-ssl:
      IPAllowList:
        sourceRange:
          - "192.168.1.0/24"

```

And I use this in composefile yaml config in my container setup:

```auto
labels:
 - "traefik.enable=true"

 - "traefik.http.routers.pfsense.tls=true"
 - "traefik.http.routers.pfsense.tls.certresolver=prod"
 - "traefik.http.routers.pfsense.rule=Host(`pfsense.home.foo.com`)"
 - "traefik.http.routers.pfsense.middlewares=local-ssl@file" <<--HERE
 - "traefik.http.routers.pfsense.entrypoints=websecure"

```

So traefik created a cert for this address and only accessible on my local network. I tested and it is working well I just want confirmation that I'm not doing anything wrong or dangerous.

Thank you,

---

<div class="post-metadata">

**Author:** ![bluepuma77](https://avatars.discourse-cdn.com/v4/letter/b/a9adbd/32.png) [@bluepuma77](https://community.traefik.io/u/bluepuma77)\
**Post date:** [April 28, 2025, 10:41am UTC](https://community.traefik.io/t/https-on-local-network/27313/2 "2025-04-28T10:41:52Z")

</div>

Looks ok, you have an `entrypoint` with a `router` with security `middleware`. You just need to make sure you use `providers.file` in Traefik static config to load the `middleware`.