Linode Letsencrypt creates PrivateKey but no Certificates

Traefik Traefik v2
1

Hello, When I create a Traefik docker stack with the following yml. The stack will start up and when I check the acme.json file I see the PrivateKey has been created but the Certificates stay null. I have tried several time AND I have even waited overnight but no matter how long I wait the Certificates remain null. Any help would be much appreciated.

version: "3.8"

networks:
  traefik_public:
    external: true

services:
  reverse-proxy:
    image: traefik:v2.4

    ports:
      - 80:80
      - 443:443

    networks:
      - traefik_public

    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - le_certs:/le_certs

    command:
      - --api.dashboard=true
      - --providers.docker=true
      - --providers.docker.swarmMode=true
      - --providers.docker.network=traefik_public

      - --providers.docker.exposedbydefault=false

      - --entrypoints.web.address=:80
      - --entrypoints.websecure.address=:443

      - --certificatesResolvers.mydnschallenge.acme.email={email}
      - --certificatesResolvers.mydnschallenge.acme.dnsChallenge=true
      - --certificatesResolvers.mydnschallenge.acme.dnsChallenge.provider=linodev4

      - --certificatesResolvers.mydnschallenge.acme.storage=/le_certs/acme.json
      - --certificatesResolvers.mydnschallenge.acme.dnsChallenge.delayBeforeCheck=0

    environment:
      - LINODE_TOKEN={token}

    deploy:
      replicas: 3
      restart_policy:
        condition: on-failure
      placement:
        constraints:
          - node.role == manager

      labels:
        - traefik.enable=true

        - traefik.http.routers.http-catchall.rule=hostregexp(`{host:.+}`)
        - traefik.http.routers.http-catchall.entrypoints=web
        - traefik.http.routers.http-catchall.middlewares=redirect-to-https
        - traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https

        - traefik.http.routers.init_certs.rule=Host(`{website}`)
        - traefik.http.routers.init_certs.tls.certresolver=mydnschallenge
        - traefik.http.routers.init_certs.tls.domains[0].main={website}
        - traefik.http.routers.init_certs.tls.domains[0].sans=*.{website}

        - traefik.http.routers.dashboard.rule=Host(`traefik.{website}`)
        - traefik.http.routers.dashboard.tls=true
        - traefik.http.routers.dashboard.service=api@internal
        - traefik.http.routers.dashboard.middlewares=auth
        - traefik.http.middlewares.auth.basicauth.users={user_name}:{hashed_password}
        - traefik.http.services.dummy-svc.loadbalancer.server.port=9999

volumes:
  le_certs:
2

Might have something to do with having 3 replicas. There is no co-ordination between the instances. You will have to run one.

3

Thank you great Idea! I went back to just my compose file (left the swarm) and this file did work but now it is not working either. again just the private key is created but not the certs. I know this file worked and now since it doesn't I am really at a loss. I don't know if it is something with letsencrypt of on the linode side of things

4

Time to look at the logs. Bump them up to DEBUG if there isn't anything obvious.