Hello hello,
I’m using traefik as part of the pangolin stack, as a nixos module. We updated the traefik module for nixos recently, and this broke something in traefik. I have been debugging for a while now, and i believe traefik is not loading the dynamic conf properly, but do not have enought traefik experience to say for sure.
There are no errors in the logs, but the dashboard and all sites are unnaccessable… Any help is greatly appreciated :)!
file structure:
└── traefik
└── dynamic
└── _nixos-pangolin.yml -> /nix/store/pys3ki8lhffhd35dl7dmxqxdjf2vk8sv-pangolin
static conf:
envsubst[2570]: {
"accesslog": {
"filePath": "/var/lib/traefik/access.log"
},
"api": {
"dashboard": true,
"debug": true,
"insecure": true
},
"certificatesResolvers": {
"letsencrypt": {
"acme": {
"caServer": "``https://acme-v02.api.letsencrypt.org/directory``",
"dnsChallenge": {
"provider": "mijnhost"
},
"email": "pangolin@jackr.eu",
"storage": "/var/lib/pangolin/config/letsencrypt/acme.json"
}
}
},
"entryPoints": {
"web": {
"address": ":80"
},
"websecure": {
"address": ":443",
"http": {
"tls": {
"certResolver": "letsencrypt"
}
},
"transport": {
"respondingTimeouts": {
"readTimeout": "30m"
}
}
}
},
"experimental": {
"plugins": {
"badger": {
"moduleName": " GitHub - fosrl/badger: Traefik middleware authentication bouncer for Pangolin ",
"version": "v1.2.0"
}
}
},
"providers": {
"file": {
"directory": "/var/lib/traefik/dynamic",
"watch": true
},
"http": {
"endpoint": "``http://localhost:3001/api/v1/traefik-config``",
"pollInterval": "5s"
}
}
}
logs:
WRN github.com/traefik/traefik/v3/cmd/traefik/traefik.go:100 > Traefik can reject some encoded characters in the request path.When your backend is not fully compliant with RFC 3986,it is recommended to set these options to false to avoid split-view situation.Refer to the documentation for more details:
INF github.com/traefik/traefik/v3/cmd/traefik/traefik.go:113 > Traefik version 3.6.7 built on I don't remember exactly version=3.6.7
DBG github.com/traefik/traefik/v3/cmd/traefik/traefik.go:119 > Static configuration loaded [json] staticConfiguration={"entryPoints":{"http":{"address":":80","forwardedHeaders":{},"http":{"maxHeaderBytes":1048576,"sanitizePath":true},"http2":{"maxConcurrentStreams":250,"maxDecoderHeaderTableSize":4096,"maxEncoderHeaderTableSize":4096},"transport":{"lifeCycle":{"graceTimeOut":"10s"},"respondingTimeouts":{"idleTimeout":"3m0s","readTimeout":"1m0s"}},"udp":{"timeout":"3s"}}},"global":{"checkNewVersion":true},"log":{"format":"common","level":"TRACE"},"providers":{"providersThrottleDuration":"2s"},"serversTransport":{"maxIdleConnsPerHost":200},"tcpServersTransport":{"dialKeepAlive":"15s","dialTimeout":"30s"}}
INF github.com/traefik/traefik/v3/cmd/traefik/traefik.go:624 > Version check is enabled.
INF github.com/traefik/traefik/v3/cmd/traefik/traefik.go:625 > Traefik checks for new releases to notify you if your version is out of date.
INF github.com/traefik/traefik/v3/cmd/traefik/traefik.go:626 > It also collects usage data during this process.
INF github.com/traefik/traefik/v3/cmd/traefik/traefik.go:627 > Check the documentation to get more info:
INF github.com/traefik/traefik/v3/cmd/traefik/traefik.go:654 >
isabled.
ik by turning this feature on
s://doc.traefik.io/traefik/contributing/data-collection/
INF github.com/traefik/traefik/v3/pkg/server/configurationwatcher.go:73 > Starting provider aggregator *aggregator.ProviderAggregator
proxy.
INF github.com/traefik/traefik/v3/cmd/traefik/traefik.go:149 > Watchdog activated with timer duration 500ms
INF github.com/traefik/traefik/v3/pkg/provider/aggregator/aggregator.go:219 > Starting provider *traefik.Provider
DBG github.com/traefik/traefik/v3/pkg/provider/aggregator/aggregator.go:220 > *traefik.Provider provider configuration config={}
DBG github.com/traefik/traefik/v3/pkg/server/server_entrypoint_tcp.go:237 > Starting TCP Server entryPointName=http
INF github.com/traefik/traefik/v3/pkg/provider/aggregator/aggregator.go:219 > Starting provider *acme.ChallengeTLSALPN
DBG github.com/traefik/traefik/v3/pkg/provider/aggregator/aggregator.go:220 > *acme.ChallengeTLSALPN provider configuration config={}
DBG github.com/traefik/traefik/v3/pkg/server/configurationwatcher.go:227 > Configuration received config={"http":{"serversTransports":{"default":{"maxIdleConnsPerHost":200}},"services":{"noop":{}}},"tcp":{"serversTransports":{"default":{"dialKeepAlive":"15s","dialTimeout":"30s"}}},"tls":{},"udp":{}} providerName=internal
DBG github.com/traefik/traefik/v3/pkg/tls/tlsmanager.go:386 > No default certificate, fallback to the internal generated certificate tlsStoreName=default
DBG github.com/traefik/traefik/v3/pkg/middlewares/observability/semconv.go:40 > Creating middleware entryPointName=http middlewareName=tracing middlewareType=SemConvServerMetrics
DBG github.com/traefik/traefik/v3/pkg/middlewares/observability/entrypoint.go:37 > Creating middleware entryPointName=http middlewareName=tracing middlewareType=TracingEntryPoint
DBG github.com/traefik/traefik/v3/pkg/middlewares/observability/semconv.go:40 > Creating middleware entryPointName=http middlewareName=tracing middlewareType=SemConvServerMetrics
DBG github.com/traefik/traefik/v3/pkg/middlewares/observability/entrypoint.go:37 > Creating middleware entryPointName=http middlewareName=tracing middlewareType=TracingEntryPoint