Override default wildcard?

Traefik Traefik v2 (latest)
, , ,
1

Is there a way to override a specified default wildcard certificate with docker labels to use letsencrypt?
v2.3.1

Specify wildcard default certificate:

tls:
  certificates:
  - certFile: /etc/certs/wildcard.pem
    keyFile: /etc/certs/wildcard.key
  options:
    default:
      cipherSuites:
      - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
      - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
      - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
      - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
      - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
      - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
  stores:
    default:
      defaultCertificate:
        certFile: /etc/certs/wildcard.pem
        keyFile: /etc/certs/wildcard.key

Setting letsencrypt using docker label but traefik still uses wildcard cert instead of letsencrypt

        - "traefik.enable=true"
        - "traefik.http.routers.speedtest-http.rule=Host(`speedtest.123.net`)"
        - "traefik.http.routers.speedtest-http.entrypoints=http"       
        - "traefik.http.services.speedtest.loadbalancer.server.port=80"
        - "traefik.http.services.speedtest.loadbalancer.server.scheme=http"
        - "traefik.http.services.speedtest.loadbalancer.passhostheader=true"                      
        - "traefik.http.routers.speedtest-https.rule=Host(`speedtest.123.net`)"
        - "traefik.http.routers.speedtest-https.service=speedtest"
        - "traefik.http.routers.speedtest-https.entrypoints=https"         
        - "traefik.http.routers.speedtest-https.tls=true"
        - "traefik.http.routers.speedtest-https.tls.certresolver=acme"

If I remove the default certificate from the file provider then this configuration uses the letsencrypt certificate and others get the traefik generated certificate. I don't want every other container to use letsencrypt but instead use the provided wildcard.

2

Hi @jacob_b

See @jnovack's solution.