Kibana redirection with docker provider

I run traefik v2.1.1 with docker provider on docker swarm with 3 managers and 2 workers.
I want to redirect kibana.

kibana:
    image: docker.elastic.co/kibana/kibana:7.5.0
    ports:
      - "5601:5601"
    configs:
      - source: kibana_config
        target: /usr/share/kibana/config/kibana.yml
    networks:
      - elk
    deploy:
      labels:
        - "traefik.enable=true"
        - "traefik.http.routers.kibana.rule=Host(`tspeda-swarm-kibana.infra.domain.fr`)"
        - "traefik.http.services.kibana.loadbalancer.server.port=5601"
        - "traefik.http.routers.kibana.entrypoints=https"
        - "traefik.http.routers.kibana.tls=true"
      mode: replicated
      replicas: 1

Kibana is running and i can see redirection properly set in traefik dashboard.
If i open a ssh tunnel to 5601, i can access kibana login page.

When i query https://tspeda-swarm-kibana.infra.domain.fr
I can see query in traefik logs but not in kibana logs and the page timeouts

traefik_reverse-proxy.1.yy686ztbt01m@tspeda-swarm-manager1    | time="2020-01-06T12:28:09Z" level=debug msg="vulcand/oxy/roundrobin/rr: completed ServeHttp on request" Request="{\"Method\":\"GET\",\"URL\":{\"Scheme\":\"\",\"Opaque\":\"\",\"User\":null,\"Host\":\"\",\"Path\":\"/\",\"RawPath\":\"\",\"ForceQuery\":false,\"RawQuery\":\"\",\"Fragment\":\"\"},\"Proto\":\"HTTP/2.0\",\"ProtoMajor\":2,\"ProtoMinor\":0,\"Header\":{\"Accept\":[\"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3\"],\"Accept-Encoding\":[\"gzip, deflate, br\"],\"Accept-Language\":[\"fr-FR,fr;q=0.9,en-US;q=0.8,en;q=0.7\"],\"Dnt\":[\"1\"],\"Sec-Fetch-Mode\":[\"navigate\"],\"Sec-Fetch-Site\":[\"none\"],\"Sec-Fetch-User\":[\"?1\"],\"Upgrade-Insecure-Requests\":[\"1\"],\"User-Agent\":[\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36\"],\"X-Forwarded-Host\":[\"tspeda-swarm-kibana.infra.domain.fr\"],\"X-Forwarded-Port\":[\"443\"],\"X-Forwarded-Proto\":[\"https\"],\"X-Forwarded-Server\":[\"08abcd14b6dd\"],\"X-Real-Ip\":[\"10.0.0.3\"]},\"ContentLength\":0,\"TransferEncoding\":null,\"Host\":\"tspeda-swarm-kibana.infra.domain.fr\",\"Form\":null,\"PostForm\":null,\"MultipartForm\":null,\"Trailer\":null,\"RemoteAddr\":\"10.0.0.3:50916\",\"RequestURI\":\"/\",\"TLS\":null}"
traefik_reverse-proxy.1.yy686ztbt01m@tspeda-swarm-manager1    | time="2020-01-06T12:28:09Z" level=debug msg="vulcand/oxy/roundrobin/rr: begin ServeHttp on request" Request="{\"Method\":\"GET\",\"URL\":{\"Scheme\":\"\",\"Opaque\":\"\",\"User\":null,\"Host\":\"\",\"Path\":\"/\",\"RawPath\":\"\",\"ForceQuery\":false,\"RawQuery\":\"\",\"Fragment\":\"\"},\"Proto\":\"HTTP/2.0\",\"ProtoMajor\":2,\"ProtoMinor\":0,\"Header\":{\"Accept\":[\"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3\"],\"Accept-Encoding\":[\"gzip, deflate, br\"],\"Accept-Language\":[\"fr-FR,fr;q=0.9,en-US;q=0.8,en;q=0.7\"],\"Dnt\":[\"1\"],\"Sec-Fetch-Mode\":[\"navigate\"],\"Sec-Fetch-Site\":[\"none\"],\"Sec-Fetch-User\":[\"?1\"],\"Upgrade-Insecure-Requests\":[\"1\"],\"User-Agent\":[\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36\"],\"X-Forwarded-Host\":[\"tspeda-swarm-kibana.infra.domain.fr\"],\"X-Forwarded-Port\":[\"443\"],\"X-Forwarded-Proto\":[\"https\"],\"X-Forwarded-Server\":[\"08abcd14b6dd\"],\"X-Real-Ip\":[\"10.0.0.3\"]},\"ContentLength\":0,\"TransferEncoding\":null,\"Host\":\"tspeda-swarm-kibana.infra.domain.fr\",\"Form\":null,\"PostForm\":null,\"MultipartForm\":null,\"Trailer\":null,\"RemoteAddr\":\"10.0.0.3:50916\",\"RequestURI\":\"/\",\"TLS\":null}"
traefik_reverse-proxy.1.yy686ztbt01m@tspeda-swarm-manager1    | time="2020-01-06T12:28:09Z" level=debug msg="vulcand/oxy/roundrobin/rr: Forwarding this request to URL" Request="{\"Method\":\"GET\",\"URL\":{\"Scheme\":\"\",\"Opaque\":\"\",\"User\":null,\"Host\":\"\",\"Path\":\"/\",\"RawPath\":\"\",\"ForceQuery\":false,\"RawQuery\":\"\",\"Fragment\":\"\"},\"Proto\":\"HTTP/2.0\",\"ProtoMajor\":2,\"ProtoMinor\":0,\"Header\":{\"Accept\":[\"text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3\"],\"Accept-Encoding\":[\"gzip, deflate, br\"],\"Accept-Language\":[\"fr-FR,fr;q=0.9,en-US;q=0.8,en;q=0.7\"],\"Dnt\":[\"1\"],\"Sec-Fetch-Mode\":[\"navigate\"],\"Sec-Fetch-Site\":[\"none\"],\"Sec-Fetch-User\":[\"?1\"],\"Upgrade-Insecure-Requests\":[\"1\"],\"User-Agent\":[\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36\"],\"X-Forwarded-Host\":[\"tspeda-swarm-kibana.infra.domain.fr\"],\"X-Forwarded-Port\":[\"443\"],\"X-Forwarded-Proto\":[\"https\"],\"X-Forwarded-Server\":[\"08abcd14b6dd\"],\"X-Real-Ip\":[\"10.0.0.3\"]},\"ContentLength\":0,\"TransferEncoding\":null,\"Host\":\"tspeda-swarm-kibana.infra.domain.fr\",\"Form\":null,\"PostForm\":null,\"MultipartForm\":null,\"Trailer\":null,\"RemoteAddr\":\"10.0.0.3:50916\",\"RequestURI\":\"/\",\"TLS\":null}" ForwardURL="http://10.0.0.68:5601"

I use others redirections which works perfectly

That's strange, some other services are working, some are not.

Exemple of working one

version: "3.7"
services:
  projet6:
    image: localhost:5001/projet6
    deploy:
      labels:
        - "traefik.enable=true"
        - "traefik.http.routers.projet6.rule=Host(`tspeda-swarm-projetu.infra.domain.fr`) && PathPrefix(`/projet6/`)"

        - "traefik.http.middlewares.project-stripprefixregex.stripprefixregex.regex=/[^/]+" 
        - "traefik.http.routers.projet6.middlewares=project-stripprefixregex@docker"
        - "traefik.http.services.projet6.loadbalancer.server.port=8080"
        - "traefik.http.routers.projet6.entrypoints=https"
        - "traefik.http.routers.projet6.tls=true"

      mode: replicated
      replicas: 1
    networks:
      - traefik-public

networks:
  traefik-public:
    external: true

Dashboard redirection is working too

        - "traefik.enable=true"
        - "traefik.http.routers.api.rule=Host(`tspeda-swarm-supervision.infra.domain.fr`) && (PathPrefix(`/dashboard`) || PathPrefix(`/api`))"
        - "traefik.http.routers.api.service=api@internal"
        - "traefik.http.routers.api.entrypoints=https"
        - "traefik.http.routers.api.tls=true"
        - "traefik.http.routers.api.middlewares=auth"
        - "traefik.http.middlewares.auth.basicauth.usersfile=/run/secrets/users"
        - "traefik.http.services.dummy-svc.loadbalancer.server.port=9999"

Now i'm trying to setup swarmprom. When i query an url, it timeout too
Here grafana exemple

  grafana:
    image: stefanprodan/swarmprom-grafana:5.3.4
    networks:
      - default
      - net
      - traefik-public
    environment:
      - GF_SECURITY_ADMIN_USER=${ADMIN_USER:-admin}
      - GF_SECURITY_ADMIN_PASSWORD=${ADMIN_PASSWORD:-password}
      - GF_USERS_ALLOW_SIGN_UP=false
    volumes:
      - grafana:/var/lib/grafana
    deploy:
      mode: replicated
      replicas: 1
      placement:
        constraints:
          - node.role == manager
      resources:
        limits:
          memory: 128M
        reservations:
          memory: 64M
      labels:
        - "traefik.enable=true"
        - "traefik.http.routers.grafana.entrypoints=https"
        - "traefik.http.routers.grafana.tls=true"
        - "traefik.http.routers.grafana.rule=Host(`tspeda-swarm-supervision.infra.domain.fr`) && PathPrefix(`/grafana`)"
        - "traefik.http.services.grafana.loadbalancer.server.port=3000"

Solved by adding external "traefik-public" network to both traefik.toml docker provider config and in docker-compose files