Nope, thats a compose config, I found another solution. Traefik cannot serve tcp tls socket by itself, cz it does not recieve any info about domain on pure tcp connection. I read acme.json, there are usual key and cert inside, encoded with base64, and then I start ssl handshake inside my container.