Traefik 2 docker best practise restart

Traefik Traefik v2 (latest)
1

Hi there,
I'm running traefik 2 on docker toolbox on virtualbox and win7...
If I try to restart all the certs are gone and I often got this error;

acme: error: 400 :: urn:ietf:params:acme:error:connection :: During secondary validation: Timeout during connect (likely firewall problem

I try to save state in virtualbox before but should I do something more?

2

Sorry for asking the probably obvious.

Do you store the certificates in a volume?
e.g. in my docker-compose case:

services:
  traefik2:
    image: "traefik:v2.2"
    volumes:
       - "./data/letsencrypt:/letsencrypt"
3

Yes, as wasle pointed out, the let's encrypt certificates traefik generates are stored in acme.json by default. If you do not persist this file it will get lost between container re-creations.

The error you are getting is because of not being able to reach your web site from acme servers. It is possible that network connection between outside world and a site running in your VM get disrupted because of the restart. From traefik point of view, there is nothing it can do to help - it's up to you to make sure that the site is up and reachable. If this is not possible you can look at configuring dns challenge instead.

4

Hi,
thank you for the help, yes I save it in a volume like this:

    volumes:
      - /traefik2:/traefik2

But the problem was that my routers firewall has been turned on and blocked the ports... Well atleast I learned something :slight_smile: