Letsencrypt HTTP challenge stuck on stage "Testing certificate renew..."

Traefik Traefik v2
1

I'm trying to get traefik to generate certs using the HTTP challenge, but when I run my traefik service, it seems to be stuck on this step:

traefik | time="2024-01-18T00:22:20Z" level=info msg="Testing certificate renew..." providerName=resolver.acme ACME CA="https://acme-staging-v02.api.letsencrypt.org/directory"

I'm not entirely sure what I am missing. Did I forget a route somewhere?

This is docker-compose_traefik.yml, that I use to run the traefik service:

version: "3.7"

services:
  traefik:
    image: "traefik:v2.10"
    container_name: "traefik"
    hostname: "traefik"
    ports:
      - "80:80"
      - "443:443"
      - "8080:8080"
    volumes:
      - "/var/run/docker.sock:/var/run/docker.sock:ro"
      - "./traefik.yml:/traefik.yml:ro"
      - "/letsencrypt/acme.json:/letsencrypt/acme.json"

networks:
  default:
    external:
      name: purldb

This is traefik.yml:

## STATIC CONFIGURATION
log:
  level: INFO

api:
  insecure: false
  dashboard: false

entryPoints:
  web:
    address: ":80"
  websecure:
    address: ":443"

certificatesResolvers:
  resolver:
    acme:
      caServer: https://acme-staging-v02.api.letsencrypt.org/directory
      email: infra@nexb.com
      storage: /letsencrypt/acme.json
      httpChallenge:
        # used during the challenge
        entryPoint: web

providers:
  docker:
    endpoint: "unix:///var/run/docker.sock"
    exposedByDefault: false
2

Why do you think it's stuck? In the configuration you shared there is not a single domain name, so no TLS certs will be created.

3

Good catch. In my other docker-compose.yml, I needed to add these to the labels of my nginx service:

      - "traefik.http.routers.purldb_https.tls=true"
      - "traefik.http.routers.purldb_https.tls.certresolver=resolver"
4

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.