LEts Encrypt http challenge behind another traefik

Traefik Traefik v3 (latest)
1

Hello,

i have a traefik instance behind another traefik instance for an internal network and want to switch to automatic cert renewal.

When i request a new cert with my internal traefik it fails because of the external traefik doesn't have the challenge token. Can i somehow forward the request to the internal traefik if the external traefik didn't start the cert request?

2

You can use tlsChallenge for the first Traefik, which will proxy/forward all http requests, so you can use httpChallenge on the second one.

But the external domain needs to be resolved externally to the first Traefik instance.

To avoid this, you can use more complicated dnsChallenge, which doesn’t connect to the domain‘s IP