I'll try to configure traefik for something like that:
- server.example.com --> traefik --> httpChallengeToLetsEncrypt
- client --> traefik (passthrough tls) --> server.example.com( with let's encrypt )
N.B.: traefik receives its requests at example.com level
What is happening:
Works correctly only if traefik does not manage let's encrypt certificates itself (otherwise it does not transmit any request whose pathPrefix begins with ".well-known/acme-challenge" )
Does not work with a config for tcp router like this:
tcp: routers: example: entryPoints: - web-secure rule: "HostSNI(`server.example.com`)" service: example tls: passthrough: true services: example: loadBalancer: servers: - url: "https://192.168.0.1:443/"
How would you let one or more services manage their let's encrypt certificates themselves ?
And is it possible to do it at the same time that traefik also manages let's encrypt certificates or the problem mentioned in point 1 is it redibitory?