unable to generate a certificate for the domains [traefik-docker]

Traefik Traefik v3 (latest)
1

When I run docker logs traefik

I see a lot of errors like this:
2026-05-13T08:39:35Z ERR Unable to obtain ACME certificate for domains error="unable to generate a certificate for the domains [traefik-docker]: acme: error: 400 :: POST :: https://acme-v02.api.letsencrypt.org/acme/new-order :: urn:ietf:params:acme:error:rejectedIdentifier :: Invalid identifiers requested :: Cannot issue for \"traefik-docker\": Domain name needs at least one dot" ACME CA=https://acme-v02.api.letsencrypt.org/directory acmeCA=https://acme-v02.api.letsencrypt.org/directory domains=["traefik-docker"] providerName=myresolver.acme routerName=websecure-traefik-docker@docker rule=Host(traefik-docker)

How do i solve this?
My traefik configuration (docker compose):

services:
    traefik:
        image: "traefik:v3.6"
        container_name: "traefik"
        restart: always
        command:
            - "--providers.docker=true"
            - "--providers.docker.exposedbydefault=false"
            - "--entrypoints.web.address=:80"
            - "--entrypoints.web.http.redirections.entrypoint.to=websecure"
            - "--entrypoints.websecure.address=:443"
            - "--entrypoints.websecure.http.tls.certResolver=myresolver"
            - "--certificatesresolvers.myresolver.acme.tlschallenge=true"
            - "--certificatesresolvers.myresolver.acme.email=webmaster@qrcode.expert"
            - "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
            - "--entrypoints.websecure.http.middlewares=no-www"
        ports:
            - "80:80"
            - "443:443"
        volumes:
            - "/var/run/docker.sock:/var/run/docker.sock:ro"
            - "./volumes/letsencrypt:/letsencrypt"
        labels:
            - "traefik.enable=true"
            - "traefik.http.middlewares.no-www.redirectregex.regex=^https://www\\.(.+)$"
            - "traefik.http.middlewares.no-www.redirectregex.replacement=https://$1"
            - "traefik.http.middlewares.no-www.redirectregex.permanent=true"
    qrcode.frontend:
        image: qrcode.frontend:latest
        restart: always
        volumes:
            - ./volumes/logs:/logs
        labels:
            - "traefik.enable=true"
            - "traefik.http.routers.qrcode-frontend.rule=Host(`qrcode.expert`) || Host(`www.qrcode.expert`)"
            - "traefik.http.routers.qrcode-frontend.priority=10"
            - "traefik.http.routers.qrcode-frontend.middlewares=qrcode-frontend-compress"
            - "traefik.http.middlewares.qrcode-frontend-compress.compress=true"
2

You set

but have no .rule=Host() on the service/container.

3

Should I set traefik.enable=false? Won't it break my http->https redirect middleware?

4

Not sure. Test it and report back :slightly_smiling_face:

If it does not work, you could place the middleware on another container or place it in a dynamic config file, read by providers.file.

5

I just needed this line in the labels section:

            - "traefik.http.routers.no-www.tls.domains="