I'm new to traefik, coming from nginx proxy manager (NPM) so I'm sure a similar question has been asked before but I am unable to find a simple answer.
Cloudflare offers "origin server certificates" for the purpose of encrypting traffic between Cloudflare and your origin server. One is generated per domain. In my setup, public SSL is applied through Cloudflare and its proxy
in NPM it was simple to upload each origin certificate and select them for each host you added.
is there a similar way to do this in Traefik?
i have managed to add all the origin certificates into traffic through a file in the dynamic configuration:
# Dynamic configuration # in configuration/certificates.yaml tls: certificates: # first certificate - certFile: /path/to/example-com.cert keyFile: /path/to/example-com.key # second certificate - certFile: /path/to/other.cert keyFile: /path/to/other.key # and so on
As far as I understand, trafik will automatically select the required cert but as is not a 'true certificate for lack of better words (it's only recognized by Cloudflare) I don't think this works.
what I am looking for is a way to apply a label to each container to tell Traefik which cert to use (or let's encrypt in some cases). In the same way you would use
could tls stores be used to do this?
thanks for any suggestions