# Traefik 2.11 Docker SSL Configuration Issue

**URL:** <https://community.traefik.io/t/traefik-2-11-docker-ssl-configuration-issue/21805>\
**Category:** Traefik v3 (latest)\
**Tags:** docker\
**Created:** [March 10, 2024, 4:33am UTC](https://community.traefik.io/t/traefik-2-11-docker-ssl-configuration-issue/21805 "2024-03-10T04:33:12Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![sksree](https://avatars.discourse-cdn.com/v4/letter/s/c4cdca/32.png) [@sksree](https://community.traefik.io/u/sksree)\
**Post date:** [March 10, 2024, 4:33am UTC](https://community.traefik.io/t/traefik-2-11-docker-ssl-configuration-issue/21805/1 "2024-03-10T04:33:12Z")

</div>

I'm currently facing an issue while configuring Traefik 2.11 on Docker with my own SSL certificate. Despite making numerous configuration changes and reading forums and documentation, Traefik continues to serve its own certificate instead of using the provided SSL certificates. I'm seeking assistance in resolving this SSL configuration problem.

**My Docker-Compose**

version: '3.8'

services:  
reverse-proxy:  
container\_name: 'traefik\_reverse\_proxy'  
image: traefik:v2.11.0  
command:  
- "--api.insecure=true"  
- "--providers.docker=true"  
- "--providers.docker.exposedbydefault=false"  
- "--entrypoints.web.address=:80"  
- "--entrypoints.websecure.address=:443"  
- "--certificatesresolvers.myresolver.acme=false"  
- "--providers.file.filename=/home/servlinux/traefik/traefik\_dynamic.yml"  
- "--accesslog=true"  
ports:  
- "80:80"  
- "443:443"  
- "8080:8080"

```
volumes:
  - /var/run/docker.sock:/var/run/docker.sock
  - ./traefik.yml:/etc/traefik/traefik.yml:ro
  - ./cert:/etc/traefik/cert/Star.abc_2023-24.crt
  - ./cert:/etc/traefik/cert/Star.abc_2023-24.key
  - ./traefik_dynamic.yml:/etc/traefik/traefik_dynamic.yml

networks:
  - traefik-public
  - proxy

restart: unless-stopped

```

networks:  
proxy:  
traefik-public:  
external: true

**Traefik.yml file**  
api:  
insecure: true  
dashboard: true

http:  
routers:  
tmarouter:  
rule: Host(`auth.mydomain.com`)  
service: server  
log:  
level: DEBUG  
accessLog:  
format: json

**Traefik Dynamic file**

tls:  
certificates:  
- certFile: "/home/servlinux/traefik/cert/Star.abc\_2023-24.crt"  
keyFile: "/home/servlinux/traefik/cert/Star.abc\_2023-24.key"  
stores:  
- default  
defaultCertificate:  
certFile: "/home/servlinux/traefik/cert/Star.abc\_2023-24.crt"  
keyFile: "/home/servlinux/traefik/cert/Star.abc\_2023-24.key"  
options:  
myresolver:  
sniStrict: true  
minVersion: VersionTLS12  
cipherSuites:  
- TLS\_ECDHE\_RSA\_WITH\_AES\_128\_GCM\_SHA256  
clientAuth:  
clientAuthType: RequireAndVerifyClientCert

**My Label**  
labels:  
- "traefik.enable=true"  
- "traefik.http.routers.tmarouter.rule=Host(`auth.mydomain.com`)"  
- "traefik.http.routers.tmarouter.entrypoints=web"  
- "traefik.http.routers.tmarouter.entrypoints=websecure"  
- "traefik.http.routers.tmarouter.tls=true"  
- "traefik.http.routers.tmarouter.service=server"  
- "traefik.http.services.server.loadbalancer.server.port=9000"  
- "traefik.http.services.server.loadbalancer.server.scheme=http"  
- "traefik.http.middlewares.redirect-to-https.redirectscheme.scheme=https"  
- "traefik.http.routers.tmarouter.middlewares=redirect-to-https@docker"  
- "traefik.http.middlewares.force-secure.redirectscheme.scheme=https"  
- "traefik.http.middlewares.force-secure.redirectscheme.permanent=true"

---

<div class="post-metadata">

**Author:** ![bluepuma77](https://avatars.discourse-cdn.com/v4/letter/b/a9adbd/32.png) [@bluepuma77](https://community.traefik.io/u/bluepuma77)\
**Post date:** [March 10, 2024, 6:31am UTC](https://community.traefik.io/t/traefik-2-11-docker-ssl-configuration-issue/21805/2 "2024-03-10T06:31:11Z")

</div>

3 things to learn:

- post Traefik v2 issues in v2 category
- use 3 backticks before and after code to make it readable, in yaml every space matters
- you can not mix static config in `traefik.yml` and `command:`, decide for one way