Sorry but those are not my days with Traefik, definitely!
The following is my tis-opts.yml file:
tls:
options:
tls-opts:
minVersion: VersionTLS12
cipherSuites:
- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
- TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
- TLS_AES_128_GCM_SHA256
- TLS_AES_256_GCM_SHA384
- TLS_CHACHA20_POLY1305_SHA256
- TLS_FALLBACK_SCSV # Client is doing version fallback. See RFC 7507
curvePreferences:
- CurveP521
- CurveP384
sniStrict: true
and this the log I get from Traefik:
2025-07-03T16:51:21+02:00 DBG github.com/traefik/traefik/v3/pkg/middlewares/recovery/recovery.go:25 > Creating middleware entryPointName=traefik middlewareName=traefik-internal-recovery middlewareType=Recovery
2025-07-03T16:51:21+02:00 DBG github.com/traefik/traefik/v3/pkg/middlewares/redirect/redirect_scheme.go:29 > Creating middleware entryPointName=web middlewareName=redirect-web-to-websecure@internal middlewareType=RedirectScheme routerName=web-to-websecure@internal
2025-07-03T16:51:21+02:00 DBG github.com/traefik/traefik/v3/pkg/middlewares/redirect/redirect_scheme.go:30 > Setting up redirection to https 443 entryPointName=web middlewareName=redirect-web-to-websecure@internal middlewareType=RedirectScheme routerName=web-to-websecure@internal
2025-07-03T16:51:21+02:00 DBG github.com/traefik/traefik/v3/pkg/middlewares/recovery/recovery.go:25 > Creating middleware entryPointName=web middlewareName=traefik-internal-recovery middlewareType=Recovery
2025-07-03T16:51:21+02:00 ERR github.com/traefik/traefik/v3/pkg/server/router/router.go:135 > error="building router handler: unknown TLS options: tls-opts@file" entryPointName=websecure routerName=traefik-rtr@docker
2025-07-03T16:51:21+02:00 DBG github.com/traefik/traefik/v3/pkg/middlewares/recovery/recovery.go:25 > Creating middleware entryPointName=websecure middlewareName=traefik-internal-recovery middlewareType=Recovery
2025-07-03T16:51:21+02:00 ERR github.com/traefik/traefik/v3/pkg/server/router/tcp/manager.go:191 > error="unknown TLS options: tls-opts@file" entryPointName=websecure routerName=traefik-rtr@docker
2025-07-03T16:51:21+02:00 DBG github.com/traefik/traefik/v3/pkg/server/router/tcp/manager.go:232 > Adding special closing route for traefik.sweet.home because broken TLS options tls-opts@file entryPointName=websecure
2025-07-03T16:51:21+02:00 DBG github.com/traefik/traefik/v3/pkg/provider/acme/provider.go:946 > Looking for provided certificate(s) to validate ["sweet.home" "*.sweet.home"]... ACME CA=https://acme-v02.api.letsencrypt.org/directory acmeCA=https://acme-v02.api.letsencrypt.org/directory providerName=dns-cloudflare.acme
2025-07-03T16:51:21+02:00 DBG github.com/traefik/traefik/v3/pkg/provider/acme/provider.go:990 > No ACME certificate generation required for domains ACME CA=https://acme-v02.api.letsencrypt.org/directory acmeCA=https://acme-v02.api.letsencrypt.org/directory domains=["sweet.home","*.sweet.home"] providerName=dns-cloudflare.acme
I'm pretty sure this has not happened in the past, before the last upgrade (v. 3.4.3) ... but I'm pretty clueless in finding a proper solution...