# \#cli

**URL:** https://community.traefik.io/tag/cli/51.md

[Latest](https://community.traefik.io/latest.md) · [Categories](https://community.traefik.io/categories.md) · [Tags](https://community.traefik.io/tags.md)

---

## [Why does Traefik v3.6.11 fail with an undefined configfile flag](https://community.traefik.io/t/why-does-traefik-v3-6-11-fail-with-an-undefined-configfile-flag/29764)

<div class="topic-metadata">

**Author:** [@dujas](https://community.traefik.io/u/dujas)\
**Replies:** 3\
**Last updated:** [March 25, 2026, 2:42am UTC](https://community.traefik.io/t/why-does-traefik-v3-6-11-fail-with-an-undefined-configfile-flag/29764 "2026-03-25T02:42:55Z")

</div>

I am upgrading traefik from v3.6.9 to v3.6.11 in K8S environment, but the pod failed to be brought up with error as below: flag provided but not defined: -configfile Run with -help to get list of available parameters T…

---

## [Traefik as a Systemd service does not start with a dedicated unprivileged user](https://community.traefik.io/t/traefik-as-a-systemd-service-does-not-start-with-a-dedicated-unprivileged-user/28749)

<div class="topic-metadata">

**Author:** [@Phoenyx](https://community.traefik.io/u/Phoenyx)\
**Replies:** 1\
**Last updated:** [September 24, 2025, 7:02pm UTC](https://community.traefik.io/t/traefik-as-a-systemd-service-does-not-start-with-a-dedicated-unprivileged-user/28749 "2025-09-24T19:02:58Z")

</div>

Hi, I have a question and hope one of you can give me the decisive tip. I have a freshly installed Debian 12 server here. Now I want to install BareMetal Traefik 3.5.2 on it. So far, so good. The problem starts as so…

---

## [Unable to append certificate XXX to store error="unable to generate TLS certificate : tls: failed to find any PEM data in key input"](https://community.traefik.io/t/unable-to-append-certificate-xxx-to-store-error-unable-to-generate-tls-certificate-tls-failed-to-find-any-pem-data-in-key-input/28219)

<div class="topic-metadata">

**Author:** [@Cipix](https://community.traefik.io/u/Cipix)\
**Replies:** 1\
**Last updated:** [August 22, 2025, 5:23am UTC](https://community.traefik.io/t/unable-to-append-certificate-xxx-to-store-error-unable-to-generate-tls-certificate-tls-failed-to-find-any-pem-data-in-key-input/28219 "2025-08-22T05:23:36Z")

</div>

I just installed traefik v3 follow the documentation (Setup Traefik Proxy in Docker Standalone - Traefik) I already have a certificate so I thought that putting them into the tls.yaml file that the doc talks about would…

---

## [How to configure self signed certificates?](https://community.traefik.io/t/how-to-configure-self-signed-certificates/28182)

<div class="topic-metadata">

**Author:** [@radoeka](https://community.traefik.io/u/radoeka)\
**Replies:** 2\
**Last updated:** [August 13, 2025, 8:30pm UTC](https://community.traefik.io/t/how-to-configure-self-signed-certificates/28182 "2025-08-13T20:30:59Z")

</div>

Hi, I would like to use self signed certificates in my own network. Reason, my provider does not support DNS challenge and it will therefor not be possible to get certificates from e.g. Let's encrypt for my internal ho…

---

## [Access log filters are not honouring configuration](https://community.traefik.io/t/access-log-filters-are-not-honouring-configuration/23650)

<div class="topic-metadata">

**Author:** [@joselsegura](https://community.traefik.io/u/joselsegura)\
**Replies:** 5\
**Last updated:** [July 27, 2025, 5:42pm UTC](https://community.traefik.io/t/access-log-filters-are-not-honouring-configuration/23650 "2025-07-27T17:42:07Z")

</div>

Hi! I'm trying to configure the access log in order to get all the requests/responses resulting in 400 to 499 status code. I'm using a docker compose file and CLI arguments to configure it: - "--accesslog=true" - "--a…

---

## [Override providers.file.directory value in traefik.yml](https://community.traefik.io/t/override-providers-file-directory-value-in-traefik-yml/27906)

<div class="topic-metadata">

**Author:** [@aFJEmaaNtD](https://community.traefik.io/u/aFJEmaaNtD)\
**Replies:** 3\
**Last updated:** [July 9, 2025, 10:30am UTC](https://community.traefik.io/t/override-providers-file-directory-value-in-traefik-yml/27906 "2025-07-09T10:30:59Z")

</div>

I expected the following command to override the providers.file.directory defined in traefik.yml, but it does not. traefik \\ --configFile=traefik/traefik.yml --providers.file.directory="$(pwd)/traefik/dynamic" I am…

---

## [Wildcard Subdomain Routing Fails Due to Host Header Rewrite (Works in NGINX)](https://community.traefik.io/t/wildcard-subdomain-routing-fails-due-to-host-header-rewrite-works-in-nginx/27851)

<div class="topic-metadata">

**Author:** [@vengatesh](https://community.traefik.io/u/vengatesh)\
**Replies:** 1\
**Last updated:** [July 3, 2025, 2:44pm UTC](https://community.traefik.io/t/wildcard-subdomain-routing-fails-due-to-host-header-rewrite-works-in-nginx/27851 "2025-07-03T14:44:40Z")

</div>

We're migrating from NGINX Ingress to Traefik and encountering issues with wildcard subdomain routing when the Host header is rewritten by an upstream proxy. :wrench: Setup: Using an IngressRoute with a rule like: Hos…

---

## [Nomad + Traefik + docker registry without tls](https://community.traefik.io/t/nomad-traefik-docker-registry-without-tls/27623)

<div class="topic-metadata">

**Author:** [@hugoj-goncalves](https://community.traefik.io/u/hugoj-goncalves)\
**Replies:** 5\
**Last updated:** [May 29, 2025, 3:42pm UTC](https://community.traefik.io/t/nomad-traefik-docker-registry-without-tls/27623 "2025-05-29T15:42:02Z")

</div>

I have 2 machines in the same internal network. I installed nomad + traefik + docker registry into one of them at 192.168.1.48. Exposed docker registry trough direct host port at :9169 and trough Traefik at :38081. I …

---

## [Stdout logs not showing up at all](https://community.traefik.io/t/stdout-logs-not-showing-up-at-all/24279)

<div class="topic-metadata">

**Author:** [@xd003](https://community.traefik.io/u/xd003)\
**Replies:** 11\
**Last updated:** [May 15, 2025, 7:00am UTC](https://community.traefik.io/t/stdout-logs-not-showing-up-at-all/24279 "2025-05-15T07:00:09Z")

</div>

I am using the following docker compose for my traefik docker container traefik: image: traefik:v3.1.2 container\_name: traefik restart: unless-stopped command: - --global.sendanonymoususage=false - --ap…

---

## [Replacing docker socket with podman sockets](https://community.traefik.io/t/replacing-docker-socket-with-podman-sockets/27495)

<div class="topic-metadata">

**Author:** [@knana1662](https://community.traefik.io/u/knana1662)\
**Replies:** 4\
**Last updated:** [May 13, 2025, 1:03pm UTC](https://community.traefik.io/t/replacing-docker-socket-with-podman-sockets/27495 "2025-05-13T13:03:49Z")

</div>

I'm using traefik and want to use podman sockets over docker sockets, which when done i can't access port 8080 over the internet. CODE BASE Ubuntu Version : 24.04 Podman Version : 4.9.3 services: reverse-proxy: …

---

## [Use certs from another host](https://community.traefik.io/t/use-certs-from-another-host/27405)

<div class="topic-metadata">

**Author:** [@repackage](https://community.traefik.io/u/repackage)\
**Replies:** 2\
**Last updated:** [May 5, 2025, 1:30am UTC](https://community.traefik.io/t/use-certs-from-another-host/27405 "2025-05-05T01:30:45Z")

</div>

I have traefik docker running, and I want portainer (http://192.168.50.16:9000) to be accessable via https://portainerhost2.example.org Other services, using docker labels work really well, but this portainer instance i…

---

## [Real IP and Host Header](https://community.traefik.io/t/real-ip-and-host-header/12336)

<div class="topic-metadata">

**Author:** [@DanW](https://community.traefik.io/u/DanW)\
**Replies:** 11\
**Last updated:** [March 26, 2025, 9:46pm UTC](https://community.traefik.io/t/real-ip-and-host-header/12336 "2025-03-26T21:46:44Z")

</div>

Could anybody help me on how to pass the real IP address and host header in Traefik please? I have a file provider that proxies connects to my Open Media Vault Control Panel but the logs still report that Traefik's IP ad…

---

## [How can I use Traefik to issue SSL for ERPNext that has been manually installed (not dockerized)?](https://community.traefik.io/t/how-can-i-use-traefik-to-issue-ssl-for-erpnext-that-has-been-manually-installed-not-dockerized/26985)

<div class="topic-metadata">

**Author:** [@giannencljsn](https://community.traefik.io/u/giannencljsn)\
**Replies:** 1\
**Last updated:** [March 25, 2025, 5:42am UTC](https://community.traefik.io/t/how-can-i-use-traefik-to-issue-ssl-for-erpnext-that-has-been-manually-installed-not-dockerized/26985 "2025-03-25T05:42:48Z")

</div>

The operating system my web server runs on is (include version): Ubuntu 24.04.2 LTS My hosting provider, if applicable, is: Hostinger We have another application, Rocket.Chat , running on ports 80 and 443 , using Tra…

---

## [Upgraded from 2.7 to 3.3 in Kubernetes, now getting a ton of RBAC errors](https://community.traefik.io/t/upgraded-from-2-7-to-3-3-in-kubernetes-now-getting-a-ton-of-rbac-errors/26821)

<div class="topic-metadata">

**Author:** [@GoingOffRoading](https://community.traefik.io/u/GoingOffRoading)\
**Replies:** 3\
**Last updated:** [March 14, 2025, 2:02pm UTC](https://community.traefik.io/t/upgraded-from-2-7-to-3-3-in-kubernetes-now-getting-a-ton-of-rbac-errors/26821 "2025-03-14T14:02:32Z")

</div>

I've had... A journey today... I went to move my homelab Traefik install (Containerd/Kuberentes) from HTTP challenge to DNS for TLS... When that didn't appear to be working (certs didn't generate), I went to upgrade my…

---

## [Traefik wildcard Cloudflare without docker](https://community.traefik.io/t/traefik-wildcard-cloudflare-without-docker/26853)

<div class="topic-metadata">

**Author:** [@alexandr](https://community.traefik.io/u/alexandr)\
**Replies:** 4\
**Last updated:** [March 13, 2025, 9:18am UTC](https://community.traefik.io/t/traefik-wildcard-cloudflare-without-docker/26853 "2025-03-13T09:18:21Z")

</div>

minimalistic setup by intent not using docker and/or kube, aka plain brew install traefik or even better download latest binary from Github before proceeding to launchd and/or other stuff make sure you can run it man…

---

## [Does Traefik Utilize the HTTPS\_PROXY Environment Variable for Backend Communication?](https://community.traefik.io/t/does-traefik-utilize-the-https-proxy-environment-variable-for-backend-communication/26618)

<div class="topic-metadata">

**Author:** [@reesewang](https://community.traefik.io/u/reesewang)\
**Replies:** 0\
**Last updated:** [February 23, 2025, 2:20pm UTC](https://community.traefik.io/t/does-traefik-utilize-the-https-proxy-environment-variable-for-backend-communication/26618 "2025-02-23T14:20:59Z")

</div>

Hello, I'm trying to understand how Traefik handles proxy settings for communicating with backend servers. After reviewing the source code, I noticed that Traefik implements two types of reverse proxies: one using githu…

---

## [Dashboard 404 after upgrading from v2](https://community.traefik.io/t/dashboard-404-after-upgrading-from-v2/26509)

<div class="topic-metadata">

**Author:** [@mlsh0](https://community.traefik.io/u/mlsh0)\
**Replies:** 3\
**Last updated:** [February 15, 2025, 6:56pm UTC](https://community.traefik.io/t/dashboard-404-after-upgrading-from-v2/26509 "2025-02-15T18:56:15Z")

</div>

I get error "404 page not found" after upgrading from traefik from v2.x.x to v3.x.. This error appears only when I'm trying to access dashboard but when I'm using it to access other containers it works fine. docker-co…

---

## [Dynamic content into static configuration](https://community.traefik.io/t/dynamic-content-into-static-configuration/26366)

<div class="topic-metadata">

**Author:** [@rdeafq](https://community.traefik.io/u/rdeafq)\
**Replies:** 1\
**Last updated:** [February 5, 2025, 1:04pm UTC](https://community.traefik.io/t/dynamic-content-into-static-configuration/26366 "2025-02-05T13:04:56Z")

</div>

I am trying to configure tracing in my Traefik container but the endpoint will change depending on the environment I am working in. I am currently using a traefik.yml for static configuration, which makes it so that the …

---

## [Problem with configuration - dashbobard only display](https://community.traefik.io/t/problem-with-configuration-dashbobard-only-display/26158)

<div class="topic-metadata">

**Author:** [@mr60](https://community.traefik.io/u/mr60)\
**Replies:** 1\
**Last updated:** [January 21, 2025, 5:57am UTC](https://community.traefik.io/t/problem-with-configuration-dashbobard-only-display/26158 "2025-01-21T05:57:27Z")

</div>

i want only test dashboard, but traefik return 404 error: this is my traefik,yml file: log: level: WARN api: dashboard: true entryPoints: http: address: ":8081" # Dynamic configuration http: routers: …

---

## [Help Needed: Traefik with Authelia and Domain Setup - traefik-traefik Error](https://community.traefik.io/t/help-needed-traefik-with-authelia-and-domain-setup-traefik-traefik-error/26010)

<div class="topic-metadata">

**Author:** [@RareBird15](https://community.traefik.io/u/RareBird15)\
**Replies:** 11\
**Last updated:** [January 16, 2025, 6:07am UTC](https://community.traefik.io/t/help-needed-traefik-with-authelia-and-domain-setup-traefik-traefik-error/26010 "2025-01-16T06:07:12Z")

</div>

Hi all, I'm new to self-hosting, Traefik, Authelia, and YAML. I recently set up a domain, laniesplace.us, purchased from Porkbun, and configured DDNS through Dynu. I've added DNS records for the subdomains I want to use…

---

## [Enabling the Traefik Dashboard on a Port Other Than 8080 - Baremetal Configuration](https://community.traefik.io/t/enabling-the-traefik-dashboard-on-a-port-other-than-8080-baremetal-configuration/25949)

<div class="topic-metadata">

**Author:** [@ifrit\_prog](https://community.traefik.io/u/ifrit_prog)\
**Replies:** 1\
**Last updated:** [January 11, 2025, 6:17pm UTC](https://community.traefik.io/t/enabling-the-traefik-dashboard-on-a-port-other-than-8080-baremetal-configuration/25949 "2025-01-11T18:17:00Z")

</div>

Hello everyone, I’m working on configuring Traefik on baremetal (not Docker or Kubernetes). I’ve tried several methods to enable the dashboard on port 48080, but I haven’t been successful yet. Here’s my latest attempt: …

---

## [Unable to generate certificate](https://community.traefik.io/t/unable-to-generate-certificate/24842)

<div class="topic-metadata">

**Author:** [@tsla](https://community.traefik.io/u/tsla)\
**Replies:** 9\
**Last updated:** [December 15, 2024, 1:33pm UTC](https://community.traefik.io/t/unable-to-generate-certificate/24842 "2024-12-15T13:33:24Z")

</div>

After the previous duration of certificate ran out, my instance of Traefik for some reason couldn't generate new certificates, which was strange since everything was working well previously, and I didn't change the confi…

---

## [No public Keys found with OIDC and Traefik Dashboard](https://community.traefik.io/t/no-public-keys-found-with-oidc-and-traefik-dashboard/25450)

<div class="topic-metadata">

**Author:** [@phillf](https://community.traefik.io/u/phillf)\
**Replies:** 3\
**Last updated:** [December 7, 2024, 1:12pm UTC](https://community.traefik.io/t/no-public-keys-found-with-oidc-and-traefik-dashboard/25450 "2024-12-07T13:12:48Z")

</div>

I have configured a middleware with the traefik-oidc-auth plugin. I get the "no public keys" after successfully authenticating against Authentik SSO. Just trying to put the dashboard behind behind authentication here. Y…

---

## [Planka docker behind traefik without docker](https://community.traefik.io/t/planka-docker-behind-traefik-without-docker/25094)

<div class="topic-metadata">

**Author:** [@luanta](https://community.traefik.io/u/luanta)\
**Replies:** 8\
**Last updated:** [November 10, 2024, 8:36am UTC](https://community.traefik.io/t/planka-docker-behind-traefik-without-docker/25094 "2024-11-10T08:36:37Z")

</div>

So I'm trying to setup traefik for the first time. I don't want to use docker for traefik (nope). It's on an archlinux host. The first service i'm trying to expose is planka. I have https setup with my own certs that i'm…

---

## [I don't know how to run CLI commands](https://community.traefik.io/t/i-dont-know-how-to-run-cli-commands/25088)

<div class="topic-metadata">

**Author:** [@ZeLion54](https://community.traefik.io/u/ZeLion54)\
**Replies:** 5\
**Last updated:** [November 9, 2024, 8:13pm UTC](https://community.traefik.io/t/i-dont-know-how-to-run-cli-commands/25088 "2024-11-09T20:13:53Z")

</div>

Hello guys, maybe it's a stupid question but I lost my head trying to figure how to run letsencrypt for singe domain, but with docker run command? When I run those double dash commands -- I'm getting unknown flag: --ent…

---

## [Unsupported protocol scheme h2c](https://community.traefik.io/t/unsupported-protocol-scheme-h2c/24286)

<div class="topic-metadata">

**Author:** [@kotharidarsh](https://community.traefik.io/u/kotharidarsh)\
**Replies:** 12\
**Last updated:** [September 4, 2024, 3:05pm UTC](https://community.traefik.io/t/unsupported-protocol-scheme-h2c/24286 "2024-09-04T15:05:34Z")

</div>

I have a requirement where in multiple GRPC services are running on different ports of the same server. For instance 50051 mapped to 8001, 50052 mapped to 8002, 50053 mapped to 8003 in the config file I have created Tr…

---

## [SSH forwarding with reverse proxy (Traefik)](https://community.traefik.io/t/ssh-forwarding-with-reverse-proxy-traefik/24246)

<div class="topic-metadata">

**Author:** [@phantom](https://community.traefik.io/u/phantom)\
**Replies:** 2\
**Last updated:** [September 3, 2024, 12:59pm UTC](https://community.traefik.io/t/ssh-forwarding-with-reverse-proxy-traefik/24246 "2024-09-03T12:59:49Z")

</div>

Hello all, The setup: I have a proxmox with some underlying containers (everything running linux). One of the containers is running traefik for routing all the data to other containers. I have a domain name which points…

---

## [Creating an IngressRouteTCP without TLS](https://community.traefik.io/t/creating-an-ingressroutetcp-without-tls/17843)

<div class="topic-metadata">

**Author:** [@svabra](https://community.traefik.io/u/svabra)\
**Replies:** 2\
**Last updated:** [July 4, 2024, 8:58pm UTC](https://community.traefik.io/t/creating-an-ingressroutetcp-without-tls/17843 "2024-07-04T20:58:30Z")

</div>

I'm trying to create a IngressRouteTCP that should connect to a kafka server with their binary protocol. Thus not HTTP/HTTPS. Just TCP. I followed this thread in order to add a new tcp entrypoint. The Traefik Dashboard …

---

## [Geoblock - Blocklisted country correctly blocked with 403 code via browser, however can still access via a Nikto test with 404 code](https://community.traefik.io/t/geoblock-blocklisted-country-correctly-blocked-with-403-code-via-browser-however-can-still-access-via-a-nikto-test-with-404-code/23430)

<div class="topic-metadata">

**Author:** [@Y57](https://community.traefik.io/u/Y57)\
**Replies:** 2\
**Last updated:** [July 2, 2024, 8:52am UTC](https://community.traefik.io/t/geoblock-blocklisted-country-correctly-blocked-with-403-code-via-browser-however-can-still-access-via-a-nikto-test-with-404-code/23430 "2024-07-02T08:52:02Z")

</div>

Hi all, Setup: Docker Traefik v3 Traefik PascalMinder/geoblock plugin: Plugin Only allow Australian IP addresses. VPN location used for test: Non-Australian Server 403 code returned via web browser 404 code retur…

---

## [Infinite redirect when using TLS](https://community.traefik.io/t/infinite-redirect-when-using-tls/23335)

<div class="topic-metadata">

**Author:** [@BAXYCode](https://community.traefik.io/u/BAXYCode)\
**Replies:** 4\
**Last updated:** [June 30, 2024, 2:46am UTC](https://community.traefik.io/t/infinite-redirect-when-using-tls/23335 "2024-06-30T02:46:55Z")

</div>

This is somewhat of a continuation to a previous question I had already asked. Here. I'm having an issue where I get an infinite redirect loop between every instance of a load balanced service instead of hitting the act…

[Next page](https://community.traefik.io/tag/cli/51.md?match_all_tags=true&page=1&tags%5B%5D=cli)
