Traefik won't work even when ping works from inside of container

Traefik Traefik v3 (latest)
1

Hey, I wanted to know what I'm doing wrong:

http:
  routers:
    vaultwarden:
      entryPoints:
        - websecure
      service: vaultwarden
      rule: Host(`password.example.com`)
  
  services:
    vaultwarden:
      loadBalancer:
        servers:
          - url: http://vaultwarden__vaultwarden:80/

global:
  checkNewVersion: true
  sendAnonymousUsage: true

log:
  level: INFO

api:
  dashboard: true
  insecure: true

entryPoints:
  web:
    address: :80
    http:
      redirections:
        entrypoint:
          to: websecure
          scheme: https

  websecure:
    address: :443
    asDefault: true
    http:
      tls:
        certResolver: cloudflare
        domains:
          - main: 'example.com'
          - sans: '*.example.com'

providers:
  file:
    directory: /traefik
    watch: true

certificatesResolvers:
  cloudflare:
    acme:
      email: 'example@gmail.com'
      storage: '/letsencrypt/acme.json'
      caserver: 'https://acme-v02.api.letsencrypt.org/directory'
      dnsChallenge:
        provider: cloudflare
        resolvers:
          - '1.1.1.1:53'
          - '8.8.8.8:53'

And I have container vaultwarden that IS connected to network traefik (traefik container is also connected to this network) (it's managed with pulumi so I don't have a docker-compose.yml)

In the dashboard it looks fine:

image
image1462×801 30.4 KB

I can even ping it from inside of traefik container:
image

vaultwarden is exposing 8081:80 and I can connect with no problem to 192.168.0.200:8081 and it works

There are no errors in traefik logs:

2024-10-13T21:54:26+02:00 INF Traefik version 3.1.4 built on 2024-09-19T13:47:17Z version=3.1.4
2024-10-13T21:54:26+02:00 INF Stats collection is enabled.
2024-10-13T21:54:26+02:00 INF Many thanks for contributing to Traefik's improvement by allowing us to receive anonymous information from your configuration.
2024-10-13T21:54:26+02:00 INF Help us improve Traefik by leaving this feature on :)
2024-10-13T21:54:26+02:00 INF More details on: https://doc.traefik.io/traefik/contributing/data-collection/
2024-10-13T21:54:26+02:00 INF Starting provider aggregator aggregator.ProviderAggregator
2024-10-13T21:54:26+02:00 INF Starting provider *file.Provider
2024-10-13T21:54:26+02:00 INF Starting provider *traefik.Provider
2024-10-13T21:54:26+02:00 INF Starting provider *acme.ChallengeTLSALPN
2024-10-13T21:54:26+02:00 INF Starting provider *acme.Provider
2024-10-13T21:54:26+02:00 INF Testing certificate renew... acmeCA=https://acme-v02.api.letsencrypt.org/directory providerName=cloudflare.acme
2024-10-13T22:04:27+02:00 WRN A new release of Traefik has been found: 3.1.6. Please consider updating.

vaultwarden container: vaultwarden.json · GitHub

traefik container: traefik.json · GitHub

traefik network: traefik-network.json · GitHub

No idea what I am missing that it won't connect :frowning:
Going to password.example.com gives me ERR_CONNECTION_TIMED_OUT

Just to be clear: example.com is not real, I configured it on cloudflare and I can successfully connect to my machine with ssh, other ports are also working (if I self-host something different like web-app, node app etc). I just can't make traefik work :frowning:

2

Share your docker-compose.yml file(s) or similar.

Can you wget the target service from inside Traefik container (curl is not installed)?

Enable and check Traefik debug log (doc) and Traefik access log in JSON format (doc).