Traefik v2 wildcard cert

Traefik Traefik v2
1

Hi, is is possible to specify all domains for certificate in one place? I have about 10 routers for 10 services on one domain (or subdomain) and I'd like to have router only for wildcard cert + SANs.
I tried this:

[http.routers]
  [http.routers.cert-domain1]
    entryPoints = ["https"]
    rule = "Host(`domain1.eu`)"
    [http.routers.cert-domain1.tls]
      certResolver = "cloudflare"
        [[http.routers.cert-domain1.tls.domains]]
          main = "*.domain1.eu"
          sans = ["domain1.eu", "admin.domain1.eu", "app.domain1.eu"]
  
  [http.routers.cert-domain2]
    entryPoints = ["https"]
    rule = "Host(`domain2.cz`)"
    [http.routers.cert-domain2.tls]
      certResolver = "cloudflare"
        [[http.routers.cert-domain2.tls.domains]]
          main = "*.domain2.cz"
          sans = ["domain2.cz"]

  [http.routers.cert-domain3]
    entryPoints = ["https"]
    rule = "Host(`domain3.cz`)"
    [http.routers.cert-domain3.tls]
      certResolver = "cloudflare"
        [[http.routers.cert-domain3.tls.domains]]
          main = "*.domain3.cz"
          sans = ["domain3.cz"]

but it shows me errors:

time="2019-07-19T11:07:55Z" level=error msg="the service \"@file\" does not exist" entryPointName=https routerName=cert-thespixxyq@file
time="2019-07-19T11:07:55Z" level=error msg="the service \"@file\" does not exist" entryPointName=https routerName=cert-leoshusar@file
time="2019-07-19T11:07:55Z" level=error msg="the service \"@file\" does not exist" entryPointName=https routerName=cert-servispc-orechovuh@file

I also tried to assign service with no URLs and still nothing, it won't generate any certificate (acme.json is empty).
Any help would be appreciated!

2

First of all, be careful, certificates resolvers as not yet part of an official release. To use certificates resolvers, you need to use containous/traefik:experimental-v2.0 docker image.

Then, the error is because the service is mandatory on a router. You should use this configuration on an existing router.

3

Thank you! I thought it's already part of alpha8. Now I managed to get working both .cz domains, but .eu fails for me.

time="2019-07-19T18:59:25Z" level=debug msg="legolog: [INFO] [*.domain.eu] acme: Preparing to solve DNS-01"
time="2019-07-19T18:59:25Z" level=debug msg="legolog: [INFO] [x.y.domain.eu] acme: Preparing to solve DNS-01"
time="2019-07-19T18:59:26Z" level=debug msg="legolog: [INFO] [domain.eu] acme: Preparing to solve DNS-01"
time="2019-07-19T18:59:26Z" level=debug msg="legolog: [INFO] [*.domain.eu] acme: Cleaning DNS-01 challenge"
time="2019-07-19T18:59:27Z" level=debug msg="legolog: [WARN] [*.domain.eu] acme: error cleaning up: cloudflare: failed to find zone eu.: Zone could not be found "
time="2019-07-19T18:59:27Z" level=debug msg="legolog: [INFO] [x.y.domain.eu] acme: Cleaning DNS-01 challenge"
time="2019-07-19T18:59:27Z" level=debug msg="legolog: [WARN] [x.y.domain.eu] acme: error cleaning up: cloudflare: failed to find zone eu.: Zone could not be found "
time="2019-07-19T18:59:27Z" level=debug msg="legolog: [INFO] [domain.eu] acme: Cleaning DNS-01 challenge"
time="2019-07-19T18:59:27Z" level=debug msg="legolog: [WARN] [domain.eu] acme: error cleaning up: cloudflare: failed to find zone eu.: Zone could not be found "

All domains (cz, eu) are managed by one CF account, so communication with CF API is working.
I found that LEGO had problems with split DNS, but that was showing different error and is fixed since January(?) so I think this is not that problem.