Hi, could anybody give me an example as docker-compose.yml how i can use existing ssl-cert/key files provided as /certs/default-cert.pem and /certs/default-key.pem for each dynamic router which I add? All I am trying is not working, e.g. version: '3.2' services: app: image: traefik:v2.0 …

I found I had to move my dynamic SSL certificate definitions into a separate TOML/YML config file and use the File Provider to reference it. certificates.yml --- tls: certificates: - certFile: "/private.crt" keyFile: "/private.key" stores: - default stores: default:…

[image] Schodemeiss: Or use the rather undocumented TRAEFIK_PROVIDERS_FILE_FILENAME="/my/path/to/certificates.yml" env variable. Traefik Environment Variables Documentation - Traefik Reference the environment variables for static configuration in Traefik Proxy. Read the technical…

[image] ldez: Environment variables | Traefik | v2.0 Sure, it's listed, but it doesn't say much except: `TRAEFIK_PROVIDERS_FILE_FILENAME` : Override default configuration template. For advanced users :) Not sure that's a helpful bit of documentation. In fact, I'd go as far as to say that mi…

@Schodemeiss good catch :+1: I will fix that.

No worries at all. It -might- even be correct in that it changes the default loading of "traefik.yml/toml" to whatever this ENV var is set to, in which case, that might trip some people up, hence the "Advanced User Warning" - but still, this is all guesses. I'd love to make some contributions to the…

Thanks for the hint. Adding the following content to a file and adding that file as a file-provider using the env var TRAEFIK_PROVIDERS_FILE_FILENAME did the trick. --- tls: stores: default: defaultCertificate: certFile: "/certs/default-cert.pem" keyFile: "/certs/default…

[image] smoebody: @Schodemeiss you suggest not to use environment variables as static configuration. Why is that? It is clearly supported by traefik and a convenient way to set up traefik without having another config-file. Some configuration values can be "watched" by Traefik and be reloaded…

[image] Schodemeiss: Some configuration values can be "watched" by Traefik and be reloaded without restarting the application. Things such as swapping out the certificates. You can simply load in a new configuration file and Traefik will pick up on the changes. I don't believe Traefik watches th…

[image] ldez: The static configuration is never watched, so it's the same thing to use CLI flags, env vars, or file on this point. Isn't the TLS configuration dynamic? So providing those using a File Provider should mean you can swap these out easily, right? Says so right in the docs. TLS | T…

TLS configuration cannot be define by using the env vars because it's in the static configuration. In the v2, the static and the dynamic configuration cannot be put in the same file.

Ok, so we're not wrong putting the TLS certs inside a separate file and defining them there? And they can be swapped out live?

Provide static ssl certificate for all routers/services

Traefik Traefik v2

ldez September 25, 2019, 3:44pm 5

@Schodemeiss good catch I will fix that.

Topic		Replies	Views
Trouble understanding how traefik picks up a custom SSL certificate for a domain Traefik v2 docker , docker-swarm	14	21565	December 11, 2020
Traefik does not use a custom certificate Traefik v2 docker	31	1983	May 2, 2024
Unable to get SSL working Traefik v2 docker	2	8414	September 15, 2019
Custom certificate not been picked up Traefik v2 docker	4	1993	March 3, 2020
[HTTPS] How to force Traefik to use local certificates (and not self-generated one instead) Traefik v2 docker , file	2	2801	August 14, 2021

Provide static ssl certificate for all routers/services

Related topics