# I'm currently facing an issue while configuring Traefik 2.11 on Docker with my own SSL certificate. Despite making numerous configuration changes and reading forums and documentation, Traefik continues to serve its own certificate

**URL:** <https://community.traefik.io/t/im-currently-facing-an-issue-while-configuring-traefik-2-11-on-docker-with-my-own-ssl-certificate-despite-making-numerous-configuration-changes-and-reading-forums-and-documentation-traefik-continues-to-serve-its-own-certificate/21885>\
**Category:** Traefik v2\
**Tags:** docker\
**Created:** [March 16, 2024, 5:38am UTC](https://community.traefik.io/t/im-currently-facing-an-issue-while-configuring-traefik-2-11-on-docker-with-my-own-ssl-certificate-despite-making-numerous-configuration-changes-and-reading-forums-and-documentation-traefik-continues-to-serve-its-own-certificate/21885 "2024-03-16T05:38:36Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![sksree](https://avatars.discourse-cdn.com/v4/letter/s/c4cdca/32.png) [@sksree](https://community.traefik.io/u/sksree)\
**Post date:** [March 16, 2024, 5:38am UTC](https://community.traefik.io/t/im-currently-facing-an-issue-while-configuring-traefik-2-11-on-docker-with-my-own-ssl-certificate-despite-making-numerous-configuration-changes-and-reading-forums-and-documentation-traefik-continues-to-serve-its-own-certificate/21885/1 "2024-03-16T05:38:36Z")

</div>

```auto
**My Docker-Compose**

version: '3.8'
 
services:
  reverse-proxy:
    container_name: 'traefik_reverse_proxy'
    image: traefik:v2.11.0
    command:
      - "--api.insecure=true"
      - "--providers.docker=true"
      - "--providers.docker.exposedbydefault=false"
      - "--entrypoints.web.address=:80"
      - "--entrypoints.websecure.address=:443"
      - "--certificatesresolvers.myresolver.acme=false"
      - "--providers.file.filename=/home/servlinux/traefik/traefik_dynamic.yml"
      - "--accesslog=true"
    ports:
      - "80:80"
      - "443:443"
      - "8080:8080"
      
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./traefik.yml:/etc/traefik/traefik.yml:ro
      - ./cert:/etc/traefik/cert/Star.abc_2023-24.crt
      - ./cert:/etc/traefik/cert/Star.abc_2023-24.key
      - ./traefik_dynamic.yml:/etc/traefik/traefik_dynamic.yml

    networks:
      - traefik-public
      - proxy

    restart: unless-stopped

networks:
  proxy:
  traefik-public:
    external: true

**Traefik.yml file**
api:
  insecure: true
  dashboard: true
 
http:
  routers:
    tmarouter:
      rule: Host(`auth.mydomain.com`)
      service: server
log:
  level: DEBUG
accessLog:
  format: json

**Traefik Dynamic file**

tls:
  certificates:
    - certFile: "/home/servlinux/traefik/cert/Star.abc_2023-24.crt"
      keyFile: "/home/servlinux/traefik/cert/Star.abc_2023-24.key"
      stores:
        - default
            defaultCertificate:
              certFile: "/home/servlinux/traefik/cert/Star.abc_2023-24.crt"
              keyFile: "/home/servlinux/traefik/cert/Star.abc_2023-24.key"
options:
    myresolver:
      sniStrict: true
      minVersion: VersionTLS12
      cipherSuites:
        - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
      clientAuth:
        clientAuthType: RequireAndVerifyClientCert
        clientAuthType: RequireAndVerifyClientCert

**My Label**
labels:
      - "traefik.enable=true"
      - "traefik.http.routers.tmarouter.rule=Host(`auth.mydomain.com`)"
      - "traefik.http.routers.tmarouter.entrypoints=web"
      - "traefik.http.routers.tmarouter.entrypoints=websecure"
      - "traefik.http.routers.tmarouter.tls=true"
      - "traefik.http.routers.tmarouter.service=server"
      - "traefik.http.services.server.loadbalancer.server.port=9000"
      - "traefik.http.services.server.loadbalancer.server.scheme=http"
      - "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"
      - "traefik.http.routers.tmarouter.middlewares=redirect-to-https@docker"
      - "traefik.http.middlewares.force-secure.redirectscheme.scheme=https"
      - "traefik.http.middlewares.force-secure.redirectscheme.permanent=true"

```

---

<div class="post-metadata">

**Author:** ![bluepuma77](https://avatars.discourse-cdn.com/v4/letter/b/a9adbd/32.png) [@bluepuma77](https://community.traefik.io/u/bluepuma77)\
**Post date:** [March 16, 2024, 6:51am UTC](https://community.traefik.io/t/im-currently-facing-an-issue-while-configuring-traefik-2-11-on-docker-with-my-own-ssl-certificate-despite-making-numerous-configuration-changes-and-reading-forums-and-documentation-traefik-continues-to-serve-its-own-certificate/21885/2 "2024-03-16T06:51:37Z")

</div>

It’s the third time I post it this week:

You can only use `traefik.yml` or compose `command:` for static config, not both, decide for one.

---

<div class="post-metadata">

**Author:** ![sksree](https://avatars.discourse-cdn.com/v4/letter/s/c4cdca/32.png) [@sksree](https://community.traefik.io/u/sksree)\
**Post date:** [March 16, 2024, 10:08am UTC](https://community.traefik.io/t/im-currently-facing-an-issue-while-configuring-traefik-2-11-on-docker-with-my-own-ssl-certificate-despite-making-numerous-configuration-changes-and-reading-forums-and-documentation-traefik-continues-to-serve-its-own-certificate/21885/3 "2024-03-16T10:08:35Z")

</div>

Thank you for your reply, I have removed the command section. Could you guide me where I went wrong Traefik is serving only default certificate instead of my own SSL.

---

<div class="post-metadata">

**Author:** ![bluepuma77](https://avatars.discourse-cdn.com/v4/letter/b/a9adbd/32.png) [@bluepuma77](https://community.traefik.io/u/bluepuma77)\
**Post date:** [March 16, 2024, 10:12am UTC](https://community.traefik.io/t/im-currently-facing-an-issue-while-configuring-traefik-2-11-on-docker-with-my-own-ssl-certificate-despite-making-numerous-configuration-changes-and-reading-forums-and-documentation-traefik-continues-to-serve-its-own-certificate/21885/4 "2024-03-16T10:12:35Z")

</div>

You need to have an `entrypoint` websecure for TLS on port 443, enable TLS (`true`) on `entrypoint` or `router`. Load custom TLS cert files in a dynamic config file, which is loaded in static config via `providers.file`.

You don’t need any `certresolver` if you bring your own certs.

---

<div class="post-metadata">

**Author:** ![sksree](https://avatars.discourse-cdn.com/v4/letter/s/c4cdca/32.png) [@sksree](https://community.traefik.io/u/sksree)\
**Post date:** [March 16, 2024, 10:14am UTC](https://community.traefik.io/t/im-currently-facing-an-issue-while-configuring-traefik-2-11-on-docker-with-my-own-ssl-certificate-despite-making-numerous-configuration-changes-and-reading-forums-and-documentation-traefik-continues-to-serve-its-own-certificate/21885/5 "2024-03-16T10:14:23Z")

</div>

I followed everything, could you have a glance at my docker-compose file, entrypoints are mentioned.