Won't get certs when using 2 domains

Traefik Traefik v3 (latest)
,
1

I am following the youtube video here and this is my config...

CleanShot 2024-09-02 at 09.11.21@2x
CleanShot 2024-09-02 at 09.11.21@2x1448×802 137 KB

Neither domain seems to get certs unless I comment out the other one... I'd love to have both, and advice?

my traefik config:

api:
  dashboard: true
  debug: true


entryPoints:
  http:
    address: ":80"
    http:
      middlewares:
        - crowdsec-bouncer@file
      redirections:
        entryPoint:
          to: https
          scheme: https
  https:
    address: ":443"
    http:
      middlewares:
        - crowdsec-bouncer@file

  http-external:
    address: ":81"
    http:
      middlewares:
        - crowdsec-bouncer@file
      redirections:
        entryPoint:
          to: https-external
          scheme: https

  https-external:
    address: ":444"
    http:
      middlewares:
        - crowdsec-bouncer@file

serversTransport:
  insecureSkipVerify: true

providers:
  docker:
    endpoint: "unix:///var/run/docker.sock"
    exposedByDefault: false
  file:
    filename: /config.yml

certificatesResolvers:
  ns1:
    acme:
      email: jaspermayone@gmail.com
      storage: acme.json
      # caServer: https://acme-v02.api.letsencrypt.org/directory # prod (default)
      caServer: https://acme-staging-v02.api.letsencrypt.org/directory # staging
      dnsChallenge:
        provider: ns1
        disablePropagationCheck: true # uncomment this if you have issues pulling certificates through cloudflare, By setting this flag to true disables the need to wait for the propagation of the TXT record to all authoritative name servers.
        #delayBeforeCheck: 60s # uncomment along with disablePropagationCheck if needed to ensure the TXT record is ready before verification is attempted
        resolvers:
          - "1.1.1.1:53"
          - "1.0.0.1:53"

log:
  level: "INFO"
  filePath: "/var/log/traefik/traefik.log"
accessLog:
  filePath: "/var/log/traefik/access.log"

EDIT: added traefik config

2

tls.domain seems correct. You need to use dnsChallenge for wildcards.

3

Oh interesting... why does it work with only one then?

4

Oh wait I already use dns challenge @bluepuma77.