Reverse proxy of container showing 500 error and blank page with 403 error

Traefik Traefik v3 (latest)
,
1

Hello Traefik community,

I'm currently trying to pass two containers through a reverse proxy.
Most of the time, the following labels would be sufficient for loading other containers I want to run.

    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.app#.rule=Host(`app#.local.MyDomain.net`)"
      - "traefik.http.routers.app#.entrypoints=https"
      - "traefik.http.routers.app#.tls=true"
      - "traefik.http.services.app#..loadbalancer.server.port=####"
    networks:
      - proxy

I have added the text above to both containers in question.

When visiting the 1st container's webui "https://app1.local.MyDomain.net" ;The result of accessing 1st container are the following: Site will load however, one file called config will return a status 500 error. The file that is being called is https://app1.local.MyDomain.net/api/config.

I have tried the following: I have resended the "get" to call the HTTP, which also returns a 500 error; however, calling the app1:port/api/config will respond with a 200 code.

When visiting the 2nd container's webui "https://app2.local.MyDomain.net"; The result of accessing the 2nd container is the following: It displays a blank white page, and It returns a 200 code for the initial html document of /, however, the following two javascripts that are intented to be loaded upon accessing the container's webui https://app2.local.MyDomain.net/vendors.bundle.js and app2.local.MyDomain.net/index.bundle.js will respond with a 403 code.

I have tried the following for the 2nd container: Added 0.0.0.0/0 in the container's whitelist, still provided a 403 code.

I think I need to use some middleware to provide additional information, but I don't understand how middleware works, or which one I should be utilizing in this case. Hopefully, someone could provide some guidance on where I might look.

I am providing the following .yml, as I have seen other posts provide them as well.
Traefik's Docker-compose

services:
  traefik:
    image: traefik
    container_name: traefik
    restart: unless-stopped
    security_opt:
      - no-new-privileges:true
    networks:
      - proxy
    ports:
      - 80:80
      - 443:443
    environment:
      CF_DNS_API_TOKEN_FILE:  Redacted
      TRAEFIK_DASHBOARD_CREDENTIALS: Redacted

    env_file: .env
    volumes:
      - /etc/localtime:/etc/localtime:ro
      - /var/run/docker.sock:/var/run/docker.sock:ro
      - ./data/traefik.yml:/traefik.yml:ro
      - ./data/acme.json:/acme.json
      - ./data/config.yml:/config.yml:ro
      - ./logs/:/logs/

    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.traefik.entrypoints=http"
      - "traefik.http.routers.traefik.rule=Host(`traefik.local.MyDomain.net`)"
      - "traefik.http.middlewares.traefik-auth.basicauth.users=REDACTED"
      - "traefik.http.middlewares.traefik-https-redirect.redirectscheme.scheme=https"
      - "traefik.http.middlewares.sslheader.headers.customrequestheaders.X-Forwarded-Proto=https"
      - "traefik.http.routers.traefik.middlewares=traefik-https-redirect"
      - "traefik.http.routers.traefik-secure.entrypoints=https"
      - "traefik.http.routers.traefik-secure.rule=Host(`traefik-dashboard.local.MyDomain.net`)"
      - "traefik.http.routers.traefik-secure.middlewares=traefik-auth"
      - "traefik.http.routers.traefik-secure.tls=true"
      - "traefik.http.routers.traefik-secure.tls.certresolver=cloudflare"
      - "traefik.http.routers.traefik-secure.tls.domains[0].main=MyDomain.net"
      - "traefik.http.routers.traefik-secure.tls.domains[0].sans=*.MyDomain.net"
      - "traefik.http.routers.traefik-secure.service=api@internal"

networks:
  proxy:
    external: true

traefik.yml

api:
  dashboard: true
  debug: true
entryPoints:
  http:
    address: ":80"
    http:
      redirections:
        entryPoint:
          to: https
          scheme: https
  https:
    address: ":443"
    transport:
      respondingTimeouts:
        readTimeout: 600s
        idleTimeout: 600s
        writeTimeout: 600s
serversTransport:
  insecureSkipVerify: true
providers:
  docker:
    endpoint: "unix:///var/run/docker.sock"
    exposedByDefault: false
  file:
    filename: config.yml
certificatesResolvers:
  cloudflare:
    acme:
      email: redacted
      storage: acme.json
      caServer: https://acme-v02.api.letsencrypt.org/directory
      dnsChallenge:
        provider: cloudflare
        resolvers:
          - "1.1.1.1:53"
          - "1.0.0.1:53"
log:
  level: DEBUG
  filepath: "/logs/traefik.log"
  format: json
  maxSize: 1
  maxBackups: 3

The containers in question's docker-compose.yml

services:
  mirakurun:
    image: mirakurun
    ports:
      - "#####":#####""
      - "ZZZZ:ZZZZ"
    volumes:
      - ./app2/run:/var/run
      - ./app2/opt:/opt
      - ./app2/config:/app-config
      - ./app2/data:/app-data
    environment:
      DISABLE_PCSCD: "${DISABLE_PCSCD:-0}"
      DISABLE_B25_TEST: "${DISABLE_B25_TEST:-0}"
    devices:
      - /dev/bus:/dev/bus
    build:
      context: "./mirakurun/docker"
      dockerfile: ${DOCKERFILE:-Dockerfile}
    cap_add:
      - SYS_ADMIN
      - SYS_NICE
    device_cgroup_rules:
      - 'c *:* rmw'
    tmpfs:
      - /tmp
    restart: always
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.app2.rule=Host(`app2.local.MyDomain.net`)"
      - "traefik.http.routers.app2.entrypoints=https"
      - "traefik.http.routers.app2.tls=true"
      - "traefik.http.services.app2.loadbalancer.server.port=#####"
    networks:
      - proxy

  mysql:
    container_name: epg-mysql
    image: mariadb:10.5
    volumes:
      - ./mysql-db:/var/lib/mysql
    environment:
      MYSQL_USER: redacted
      MYSQL_PASSWORD: redacted
      MYSQL_ROOT_PASSWORD: redacted
      MYSQL_DATABASE: redacted
      TZ: ""
    command: redacted # for mariadb
    restart: always
    networks:
      - proxy

  epgstation:
    container_name: epgstation
    build:
      context: "./epgstation"
      dockerfile: "debian.Dockerfile"
    volumes:
      - ./app1/config:/app/config
      - ./app1/data:/app/data
      - ./app1/thumbnail:/app/thumbnail
      - ./app1/logs:/app/logs
    depends_on:
      - mirakurun
      - mysql
    ports:
      - "XXXX:XXXX"
      - "XXXY:XXXY"
    restart: always
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.app1.rule=Host(`app1.local.MyDomain.net`)"
      - "traefik.http.routers.app1.entrypoints=https"
      - "traefik.http.routers.app1.tls=true"
      - "traefik.http.services.app1.loadbalancer.server.port=XXXX"
    networks:
      - proxy
	  
volumes:
  mysql-db:
    driver: local

networks:
  proxy:
    external: true

If there is any additional information needed, I will be happy to provide it.

2

Enable Traefik debug log (doc) and Traefik access log in JSON format (doc). Which router is used and what are the stati in access log during a request?

Note that you usually would only use ports: on Traefik container. Otherwise you expose the services directly to the Internet, potentially circumventing any Traefik security middlewares. Within a Docker network all ports are reachable anyway.

3

Thank you bluepuma77, I have provided the following logs during the request.

Note that you usually would only use ports: on Traefik container. Otherwise you expose the services directly to the Internet, potentially circumventing any Traefik security middlewares. Within a Docker network all ports are reachable anyway.

Could you elaborate on this please? I am utilizing ports: on my containers so they are accessible on my LAN. I do not believe they are exposed directly to the internet, perhaps I am wrong on this?

traefik.log

{"level":"debug","time":"2025-05-08T07:22:37+09:00","caller":"github.com/traefik/traefik/v3/pkg/tls/certificate.go:132","message":"Adding certificate for domain(s) *.myDomain.net,myDomain.net"}
{"level":"debug","providerName":"docker","time":"2025-05-08T07:22:37+09:00","caller":"github.com/traefik/traefik/v3/pkg/provider/docker/pdocker.go:90","message":"Provider connection established with docker 28.0.4 (API 1.48)"}
{"level":"debug","providerName":"docker","container":"mysql-mirakurun-epgstation-7683aae2557a5aa2c7bac05d583b48186889ddf55ac067dc1578c2b94cdb38ac","time":"2025-05-08T07:22:37+09:00","caller":"github.com/traefik/traefik/v3/pkg/provider/docker/config.go:185","message":"Filtering disabled container"}
{"level":"debug","tlsStoreName":"default","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/tls/tlsmanager.go:321","message":"No default certificate, fallback to the internal generated certificate"}
{"level":"debug","entryPointName":"http","routerName":"http-to-https@internal","middlewareName":"redirect-http-to-https@internal","middlewareType":"RedirectScheme","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/middlewares/redirect/redirect_scheme.go:29","message":"Creating middleware"}
{"level":"debug","entryPointName":"http","routerName":"http-to-https@internal","middlewareName":"redirect-http-to-https@internal","middlewareType":"RedirectScheme","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/middlewares/redirect/redirect_scheme.go:30","message":"Setting up redirection to https 443"}
{"level":"debug","entryPointName":"http","middlewareName":"traefik-internal-recovery","middlewareType":"Recovery","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/middlewares/recovery/recovery.go:25","message":"Creating middleware"}
{"level":"debug","entryPointName":"https","middlewareName":"traefik-internal-recovery","middlewareType":"Recovery","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/middlewares/recovery/recovery.go:25","message":"Creating middleware"}
{"level":"debug","entryPointName":"https","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/router/tcp/manager.go:237","message":"Adding route for pi.local.myDomain.net with TLS options default"}
{"level":"debug","entryPointName":"https","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/router/tcp/manager.go:237","message":"Adding route for router.local.myDomain.net with TLS options default"}
{"level":"debug","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/tls/certificate.go:132","message":"Adding certificate for domain(s) *.local.myDomain.net,local.myDomain.net"}
{"level":"debug","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/tls/certificate.go:132","message":"Adding certificate for domain(s) *.tail.myDomain.net,tail.myDomain.net"}
{"level":"debug","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/tls/certificate.go:132","message":"Adding certificate for domain(s) *.myDomain.net,myDomain.net"}
{"level":"debug","tlsStoreName":"default","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/tls/tlsmanager.go:321","message":"No default certificate, fallback to the internal generated certificate"}
{"level":"debug","entryPointName":"http","routerName":"http-to-https@internal","middlewareName":"redirect-http-to-https@internal","middlewareType":"RedirectScheme","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/middlewares/redirect/redirect_scheme.go:29","message":"Creating middleware"}
{"level":"debug","entryPointName":"http","routerName":"http-to-https@internal","middlewareName":"redirect-http-to-https@internal","middlewareType":"RedirectScheme","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/middlewares/redirect/redirect_scheme.go:30","message":"Setting up redirection to https 443"}
{"level":"debug","entryPointName":"http","routerName":"traefik@docker","serviceName":"traefik-traefik@docker","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/service.go:320","message":"Creating load-balancer"}
{"level":"debug","entryPointName":"http","routerName":"traefik@docker","serviceName":"traefik-traefik@docker","serverIndex":0,"URL":"http://172.20.0.7:80","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/service.go:363","message":"Creating server"}
{"level":"debug","entryPointName":"http","routerName":"traefik@docker","middlewareName":"traefik-https-redirect@docker","middlewareType":"RedirectScheme","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/middlewares/redirect/redirect_scheme.go:29","message":"Creating middleware"}
{"level":"debug","entryPointName":"http","routerName":"traefik@docker","middlewareName":"traefik-https-redirect@docker","middlewareType":"RedirectScheme","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/middlewares/redirect/redirect_scheme.go:30","message":"Setting up redirection to https "}
{"level":"debug","entryPointName":"http","middlewareName":"traefik-internal-recovery","middlewareType":"Recovery","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/middlewares/recovery/recovery.go:25","message":"Creating middleware"}
{"level":"debug","entryPointName":"https","routerName":"app1@docker","serviceName":"app1@docker","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/service.go:320","message":"Creating load-balancer"}
{"level":"debug","entryPointName":"https","routerName":"app1@docker","serviceName":"app1@docker","serverIndex":0,"URL":"http://172.20.0.20:XXXX","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/service.go:363","message":"Creating server"}
{"level":"debug","entryPointName":"https","routerName":"traefik-secure@docker","middlewareName":"traefik-auth@docker","middlewareType":"BasicAuth","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/middlewares/auth/basic_auth.go:37","message":"Creating middleware"}
{"level":"debug","entryPointName":"https","routerName":"traefik-secure@docker","middlewareName":"traefik-auth@docker","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/middlewares/observability/middleware.go:33","message":"Adding tracing to middleware"}
{"level":"debug","entryPointName":"https","middlewareName":"traefik-internal-recovery","middlewareType":"Recovery","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/middlewares/recovery/recovery.go:25","message":"Creating middleware"}
{"level":"debug","entryPointName":"https","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/router/tcp/manager.go:237","message":"Adding route for traefik-dashboard.local.myDomain.net with TLS options default"}
{"level":"debug","entryPointName":"https","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/router/tcp/manager.go:237","message":"Adding route for mirakurun.local.myDomain.net with TLS options default"}
{"level":"debug","entryPointName":"https","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/router/tcp/manager.go:237","message":"Adding route for epg.local.myDomain.net with TLS options default"}
{"level":"debug","providerName":"cloudflare.acme","acmeCA":"https://acme-v02.api.letsencrypt.org/directory","providerName":"cloudflare.acme","ACME CA":"https://acme-v02.api.letsencrypt.org/directory","time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/provider/acme/provider.go:946","message":"Looking for provided certificate(s) to validate [\"myDomain.net\" \"*.myDomain.net\"]..."}
{"level":"debug","providerName":"cloudflare.acme","acmeCA":"https://acme-v02.api.letsencrypt.org/directory","providerName":"cloudflare.acme","ACME CA":"https://acme-v02.api.letsencrypt.org/directory","domains":["myDomain.net","*.myDomain.net"],"time":"2025-05-08T07:22:38+09:00","caller":"github.com/traefik/traefik/v3/pkg/provider/acme/provider.go:990","message":"No ACME certificate generation required for domains"}
{"level":"debug","middlewareName":"traefik-auth@docker","middlewareType":"BasicAuth","time":"2025-05-08T07:22:43+09:00","caller":"github.com/traefik/traefik/v3/pkg/middlewares/auth/basic_auth.go:89","message":"Authentication succeeded"}
{"level":"debug","middlewareName":"traefik-auth@docker","middlewareType":"BasicAuth","time":"2025-05-08T07:22:47+09:00","caller":"github.com/traefik/traefik/v3/pkg/middlewares/auth/basic_auth.go:89","message":"Authentication succeeded"}
{"level":"debug","middlewareName":"traefik-auth@docker","middlewareType":"BasicAuth","time":"2025-05-08T07:22:52+09:00","caller":"github.com/traefik/traefik/v3/pkg/middlewares/auth/basic_auth.go:89","message":"Authentication succeeded"}
{"level":"debug","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","error":"context canceled","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/proxy/httputil/proxy.go:121","message":"499 Client Closed Request"}
{"level":"debug","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","error":"context canceled","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/proxy/httputil/proxy.go:121","message":"499 Client Closed Request"}
{"level":"debug","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:54+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:55+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:55+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:55+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:55+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:55+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:55+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:55+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:55+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:55+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:55+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:55+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:55+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:55+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:55+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.20:XXXX"}
{"level":"debug","time":"2025-05-08T07:22:57+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.11:#####"}
{"level":"debug","time":"2025-05-08T07:22:57+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.11:#####"}
{"level":"debug","time":"2025-05-08T07:22:57+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.11:#####"}
{"level":"debug","time":"2025-05-08T07:22:57+09:00","caller":"github.com/traefik/traefik/v3/pkg/server/service/loadbalancer/wrr/wrr.go:173","message":"Service selected by WRR: http://172.20.0.11:#####"}
{"level":"debug","error":"context canceled","time":"2025-05-08T07:22:57+09:00","caller":"github.com/traefik/traefik/v3/pkg/proxy/httputil/proxy.go:121","message":"499 Client Closed Request"}
{"level":"debug","middlewareName":"traefik-auth@docker","middlewareType":"BasicAuth","time":"2025-05-08T07:22:57+09:00","caller":"github.com/traefik/traefik/v3/pkg/middlewares/auth/basic_auth.go:89","message":"Authentication succeeded"}
4

access.log

{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":929,"DownstreamStatus":200,"Duration":5674434,"OriginContentSize":929,"OriginDuration":5532333,"OriginStatus":200,"Overhead":142101,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":1,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:54.428454839+09:00","StartUTC":"2025-05-07T22:22:54.428454839Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:54+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":0,"DownstreamStatus":304,"Duration":2042063,"OriginContentSize":0,"OriginDuration":1918250,"OriginStatus":304,"Overhead":123813,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":2,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/css/chunk-vendors.f5b35849.css","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:54.471641658+09:00","StartUTC":"2025-05-07T22:22:54.471641658Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:54+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":25948,"DownstreamStatus":200,"Duration":3347760,"OriginContentSize":25948,"OriginDuration":3278100,"OriginStatus":200,"Overhead":69660,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":3,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/css/app.f111ffed.css","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:54.472333887+09:00","StartUTC":"2025-05-07T22:22:54.472333887Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:54+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":0,"DownstreamStatus":304,"Duration":1244991,"OriginContentSize":0,"OriginDuration":1167164,"OriginStatus":304,"Overhead":77827,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":4,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/js/chunk-vendors.3f12854e.js","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:54.476030817+09:00","StartUTC":"2025-05-07T22:22:54.476030817Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:54+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":0,"DownstreamStatus":304,"Duration":834496,"OriginContentSize":0,"OriginDuration":779574,"OriginStatus":304,"Overhead":54922,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":5,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/js/app.db2c78fd.js","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:54.477885046+09:00","StartUTC":"2025-05-07T22:22:54.477885046Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:54+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":74,"DownstreamStatus":500,"Duration":4277858,"OriginContentSize":74,"OriginDuration":4135375,"OriginStatus":500,"Overhead":142483,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":6,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/api/config","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:54.581409486+09:00","StartUTC":"2025-05-07T22:22:54.581409486Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:54+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":24742,"DownstreamStatus":200,"Duration":20512762,"OriginContentSize":24742,"OriginDuration":20392845,"OriginStatus":200,"Overhead":119917,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":7,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/api/channels","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:54.602960393+09:00","StartUTC":"2025-05-07T22:22:54.602960393Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:54+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":21,"DownstreamStatus":499,"Duration":230081,"OriginContentSize":21,"OriginDuration":117963,"OriginStatus":499,"Overhead":112118,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":8,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/icon/ios.png","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:54.629142694+09:00","StartUTC":"2025-05-07T22:22:54.629142694Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:54+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":21,"DownstreamStatus":499,"Duration":223026,"OriginContentSize":21,"OriginDuration":120147,"OriginStatus":499,"Overhead":102879,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":9,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/icon/android.png","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:54.629335565+09:00","StartUTC":"2025-05-07T22:22:54.629335565Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:54+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":20,"DownstreamStatus":200,"Duration":2875929,"OriginContentSize":20,"OriginDuration":2754869,"OriginStatus":200,"Overhead":121060,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":10,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/api/version","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:54.683920338+09:00","StartUTC":"2025-05-07T22:22:54.683920338Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:54+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":50,"DownstreamStatus":200,"Duration":17668825,"OriginContentSize":50,"OriginDuration":17565147,"OriginStatus":200,"Overhead":103678,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":11,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/api/reserves/cnts","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:54.684994704+09:00","StartUTC":"2025-05-07T22:22:54.684994704Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:54+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":7486,"DownstreamStatus":200,"Duration":18907011,"OriginContentSize":7486,"OriginDuration":18775659,"OriginStatus":200,"Overhead":131352,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":12,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/api/recording?isHalfWidth=true\u0026offset=0\u0026limit=24","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:54.716810763+09:00","StartUTC":"2025-05-07T22:22:54.716810763Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:54+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":70809,"DownstreamStatus":200,"Duration":28863792,"OriginContentSize":70809,"OriginDuration":28743089,"OriginStatus":200,"Overhead":120703,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":13,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/api/recorded?isHalfWidth=true\u0026offset=0\u0026limit=24","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:54.749945429+09:00","StartUTC":"2025-05-07T22:22:54.749945429Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:54+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":29189,"DownstreamStatus":200,"Duration":12276176,"OriginContentSize":29189,"OriginDuration":12196967,"OriginStatus":200,"Overhead":79209,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":14,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/api/reserves?type=normal\u0026isHalfWidth=true\u0026offset=0\u0026limit=24","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:54.793197929+09:00","StartUTC":"2025-05-07T22:22:54.793197929Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:54+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":15741,"DownstreamStatus":200,"Duration":20059491,"OriginContentSize":15741,"OriginDuration":19743542,"OriginStatus":200,"Overhead":315949,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":16,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/api/thumbnails/54","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:54.987873086+09:00","StartUTC":"2025-05-07T22:22:54.987873086Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:55+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":22493,"DownstreamStatus":200,"Duration":21338520,"OriginContentSize":22493,"OriginDuration":21158514,"OriginStatus":200,"Overhead":180006,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":15,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/api/thumbnails/55","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:54.987789173+09:00","StartUTC":"2025-05-07T22:22:54.987789173Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:55+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":8929,"DownstreamStatus":200,"Duration":53752924,"OriginContentSize":8929,"OriginDuration":53617846,"OriginStatus":200,"Overhead":135078,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":17,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/api/thumbnails/52","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:54.992487755+09:00","StartUTC":"2025-05-07T22:22:54.992487755Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:55+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":14575,"DownstreamStatus":200,"Duration":54115771,"OriginContentSize":14575,"OriginDuration":53931105,"OriginStatus":200,"Overhead":184666,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":18,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/api/thumbnails/51","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:54.993059374+09:00","StartUTC":"2025-05-07T22:22:54.993059374Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:55+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":18189,"DownstreamStatus":200,"Duration":53775212,"OriginContentSize":18189,"OriginDuration":53675630,"OriginStatus":200,"Overhead":99582,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":19,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/api/thumbnails/50","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:54.993746956+09:00","StartUTC":"2025-05-07T22:22:54.993746956Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:55+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":23689,"DownstreamStatus":200,"Duration":68538132,"OriginContentSize":23689,"OriginDuration":68356110,"OriginStatus":200,"Overhead":182022,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":20,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/api/thumbnails/49","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:54.994274505+09:00","StartUTC":"2025-05-07T22:22:54.994274505Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:55+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":14029,"DownstreamStatus":200,"Duration":70219256,"OriginContentSize":14029,"OriginDuration":70063307,"OriginStatus":200,"Overhead":155949,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":21,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/api/thumbnails/48","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:54.994780605+09:00","StartUTC":"2025-05-07T22:22:54.994780605Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:55+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":19917,"DownstreamStatus":200,"Duration":67192623,"OriginContentSize":19917,"OriginDuration":67055411,"OriginStatus":200,"Overhead":137212,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":22,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/api/thumbnails/47","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:54.998534047+09:00","StartUTC":"2025-05-07T22:22:54.998534047Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:55+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":11419,"DownstreamStatus":200,"Duration":66935627,"OriginContentSize":11419,"OriginDuration":66799428,"OriginStatus":200,"Overhead":136199,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":24,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/api/thumbnails/44","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:54.99940837+09:00","StartUTC":"2025-05-07T22:22:54.99940837Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:55+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":3150,"DownstreamStatus":200,"Duration":66893390,"OriginContentSize":3150,"OriginDuration":66764091,"OriginStatus":200,"Overhead":129299,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":26,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/api/thumbnails/35","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:54.999865786+09:00","StartUTC":"2025-05-07T22:22:54.999865786Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:55+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":28102,"DownstreamStatus":200,"Duration":67789814,"OriginContentSize":28102,"OriginDuration":67662089,"OriginStatus":200,"Overhead":127725,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":23,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/api/thumbnails/46","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:54.999027402+09:00","StartUTC":"2025-05-07T22:22:54.999027402Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:55+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":18279,"DownstreamStatus":200,"Duration":67639871,"OriginContentSize":18279,"OriginDuration":67481293,"OriginStatus":200,"Overhead":158578,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":25,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/api/thumbnails/43","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:54.999715214+09:00","StartUTC":"2025-05-07T22:22:54.999715214Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:55+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":82,"DownstreamStatus":200,"Duration":3052224,"OriginContentSize":82,"OriginDuration":2912932,"OriginStatus":200,"Overhead":139292,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":39,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/serviceWorker.js","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:55.43354133+09:00","StartUTC":"2025-05-07T22:22:55.43354133Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:55+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":0,"DownstreamStatus":304,"Duration":2082174,"OriginContentSize":0,"OriginDuration":1961512,"OriginStatus":304,"Overhead":120662,"RequestAddr":"app1.local.MyDomain.net","RequestContentSize":0,"RequestCount":40,"RequestHost":"app1.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/serviceWorker.js","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app1@docker","ServiceAddr":"172.20.0.20:XXXX","ServiceName":"app1@docker","ServiceURL":"http://172.20.0.20:XXXX","StartLocal":"2025-05-08T07:22:55.600395924+09:00","StartUTC":"2025-05-07T22:22:55.600395924Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:55+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":647,"DownstreamStatus":200,"Duration":17527656,"OriginContentSize":647,"OriginDuration":17343809,"OriginStatus":200,"Overhead":183847,"RequestAddr":"app2.local.MyDomain.net","RequestContentSize":0,"RequestCount":41,"RequestHost":"app2.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app2@docker","ServiceAddr":"172.20.0.11:#####","ServiceName":"app2@docker","ServiceURL":"http://172.20.0.11:#####","StartLocal":"2025-05-08T07:22:57.261906072+09:00","StartUTC":"2025-05-07T22:22:57.261906072Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:57+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":0,"DownstreamStatus":403,"Duration":8348107,"OriginContentSize":0,"OriginDuration":8087687,"OriginStatus":403,"Overhead":260420,"RequestAddr":"app2.local.MyDomain.net","RequestContentSize":0,"RequestCount":42,"RequestHost":"app2.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/vendors.bundle.js","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app2@docker","ServiceAddr":"172.20.0.11:#####","ServiceName":"app2@docker","ServiceURL":"http://172.20.0.11:#####","StartLocal":"2025-05-08T07:22:57.301108796+09:00","StartUTC":"2025-05-07T22:22:57.301108796Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:57+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":0,"DownstreamStatus":403,"Duration":17869248,"OriginContentSize":0,"OriginDuration":17655863,"OriginStatus":403,"Overhead":213385,"RequestAddr":"app2.local.MyDomain.net","RequestContentSize":0,"RequestCount":43,"RequestHost":"app2.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/index.bundle.js","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app2@docker","ServiceAddr":"172.20.0.11:#####","ServiceName":"app2@docker","ServiceURL":"http://172.20.0.11:#####","StartLocal":"2025-05-08T07:22:57.301306693+09:00","StartUTC":"2025-05-07T22:22:57.301306693Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:57+09:00"}
{"ClientAddr":"192.168.XX.YY:548##","ClientHost":"192.168.XX.YY","ClientPort":"548##","ClientUsername":"-","DownstreamContentSize":21,"DownstreamStatus":499,"Duration":251145,"OriginContentSize":21,"OriginDuration":124703,"OriginStatus":499,"Overhead":126442,"RequestAddr":"app2.local.MyDomain.net","RequestContentSize":0,"RequestCount":44,"RequestHost":"app2.local.MyDomain.net","RequestMethod":"GET","RequestPath":"/icon.svg","RequestPort":"-","RequestProtocol":"HTTP/2.0","RequestScheme":"https","RetryAttempts":0,"RouterName":"app2@docker","ServiceAddr":"172.20.0.11:#####","ServiceName":"app2@docker","ServiceURL":"http://172.20.0.11:#####","StartLocal":"2025-05-08T07:22:57.331233999+09:00","StartUTC":"2025-05-07T22:22:57.331233999Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"https","level":"info","msg":"","time":"2025-05-08T07:22:57+09:00"}
5

If you run the containers in a LAN and only port forward 80+443 from external to your Traefik, then you should be fine.

But don’t do that on a VM connected to the Internet.

6

indicates what the target service responded, so it’s not an error status by Traefik.

It seems you don’t mess with paths and stripPrefix, so this is unusual. Check if RouterName and ServiceName are the ones that should be matched by the rule.

If it is the correct router and service, you should check your target service logs.

7

Feel free to correct me on the RouterName and ServiceName.

The RouterName would reference the traefik.http.routers.RouterName.entrypoints=https
and the ServiceName would refer to "traefik.http.services.ServiceName.loadbalancer.server.port=####"

If the statements above are true, then those are matched correctly. I am replacing the name RouterName and ServiceName manually on the logs to do my best to redact certain information.

For the target service logs here are the following.

This is the following output upon accessing Docker via app1.local.MyDomain.net based on the access.log that the application provides. The docker logs does not provide any information that would be useful for accessing the webui.

[2025-05-09T21:46:35.086] [INFO] access - 192.168.XX.YY - - "GET /api/thumbnails/60 HTTP/1.1" 200 10244 "https://App1.local.myDomain.net/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
[2025-05-09T21:46:35.086] [INFO] access - 192.168.XX.YY - - "GET /api/thumbnails/59 HTTP/1.1" 200 12706 "https://App1.local.myDomain.net/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
[2025-05-09T21:46:35.086] [INFO] access - 192.168.XX.YY - - "GET /api/thumbnails/58 HTTP/1.1" 200 22630 "https://App1.local.myDomain.net/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
[2025-05-09T21:46:35.087] [INFO] access - 192.168.XX.YY - - "GET /api/thumbnails/57 HTTP/1.1" 200 26333 "https://App1.local.myDomain.net/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
[2025-05-09T21:46:35.087] [INFO] access - 192.168.XX.YY - - "GET /api/thumbnails/56 HTTP/1.1" 200 25329 "https://App1.local.myDomain.net/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
[2025-05-09T21:46:35.087] [INFO] access - 192.168.XX.YY - - "GET /api/thumbnails/55 HTTP/1.1" 200 22493 "https://App1.local.myDomain.net/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
[2025-05-09T21:46:35.087] [INFO] access - 192.168.XX.YY - - "GET /api/thumbnails/61 HTTP/1.1" 200 23840 "https://App1.local.myDomain.net/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
[2025-05-09T21:46:35.088] [INFO] access - 192.168.XX.YY - - "GET /api/thumbnails/49 HTTP/1.1" 200 23689 "https://App1.local.myDomain.net/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
[2025-05-09T21:46:35.452] [INFO] access - 192.168.XX.YY - - "GET /serviceWorker.js HTTP/1.1" 200 82 "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"
[2025-05-09T21:46:35.737] [INFO] access - 192.168.XX.YY - - "GET /serviceWorker.js HTTP/1.1" 304 - "" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0"

app2's docker logs : this is the following output of the logs, upon accessing the docker via's app2.local.MyDomain.net

2025-05-09T22:13:53.609+09:00 info: 172.20.0.7 - GET / HTTP/1.1 304 - - 13.236 ms Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0
2025-05-09T22:13:53.682+09:00 info: 172.20.0.7 - GET /vendors.bundle.js HTTP/1.1 403 - - 9.013 ms Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0
2025-05-09T22:13:53.693+09:00 info: 172.20.0.7 - GET /index.bundle.js HTTP/1.1 403 - - 7.869 ms Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0
2025-05-09T22:13:53.747+09:00 info: 172.20.0.7 - GET /vendors.bundle.js HTTP/1.1 403 - - 8.161 ms Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0
2025-05-09T22:13:53.756+09:00 info: 172.20.0.7 - GET /index.bundle.js HTTP/1.1 403 - - 7.349 ms Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0
2025-05-09T22:13:53.771+09:00 info: 172.20.0.7 - GET /icon.svg HTTP/1.1 403 - - 7.998 ms Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:138.0) Gecko/20100101 Firefox/138.0
8

For app1, I accessed the api's debug area, and attempted to execute the GET /config (this responds with a 500 error)

This is the following response:

Failed to fetch.
**Possible Reasons:**

* CORS
* Network Failure
* URL scheme must be "http" or "https" for CORS request.

In the web browser's developer console's networking tab, the file that responded with 500 has the following information

General:
Request URL
https://app1.local.MyDomain.net/api/config
Request Method
GET
Status Code
500 Internal Server Error
Remote Address
192.168.XX.ZZ:443
Referrer Policy
strict-origin-when-cross-origin

The response is the following :
{"code":500,"message":"Internal Server Error","errors":"httpsConfigError"}

I've attempted to add the following labels, however, this has ended up with the site inaccessible.

Here are the labels I tried.

    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.app1.rule=Host(`app1.local.MyDomain.net`)"
      - "traefik.http.routers.epgstation.entrypoints=https"
      - "traefik.http.routers.epgstation.tls=true"
      - "traefik.http.services.epgstation.loadbalancer.server.port=XXXX"

      - "traefik.http.routers.app1.middlewares=app1-cors"
      - "traefik.http.middlewares.app1-cors.headers.customresponseheaders.Access-Control-Allow-Origin=*"
      - "traefik.http.middlewares.app1-cors.headers.customresponseheaders.Access-Control-Allow-Methods=*" # also replaced * with GET,POST,OPTIONS
      - "traefik.http.middlewares.app1-cors.headers.customresponseheaders.Access-Control-Allow-Headers=*"
9

What TLS cert do you use? CertResolver is not assigned, did you load a custom TLS cert, that matches "app1.local.MyDomain.net"?

10

Based on my traefik's docker-compose, I used cloudflare utilizing the wildcard. I've never had to assign one for previous containers.

11

I think with this you overwrite any previous certResolver assignment to the router. So you would need to provide custom TLS certs in a dynamic config file.

It's best to manage TLS directly (and only) on entrypoint, see simple Traefik example and simple Traefik dnsChallenge example.