thomvaill/tads-boilerplate

subdomains do not obtain letsencrypt certificate

ivoba opened this issue · 1 comments

ivoba commented

Describe the bug
I cant get letsencrypt certificates for subdomains.

To Reproduce
I have the A records of the subdomains pointing to the Server.
In the stack yaml file i added the known subdomains:

traefik.frontend.rule=Host:{{ domains.main }},{{ domains.main_www }},{{ domains.eco_ivobathke }},{{ domains.oxid_ivobathke }}

The letsencrypt block in traefik.yml.j2 is:

{% if letsencrypt %} # you can also use conditional statements
      - --acme
      - --acme.acmeLogging
      - --acme.storage=traefik/acme/account
      - --acme.entryPoint=https
      - --acme.email=admin@{{ domains.main }}
      - --acme.httpchallenge.entrypoint=http
      - --acme.domains={{ domains.main }},{{ domains.main_www }}
{% endif %}

I am reading about defining main & sans domain in the traefik.toml file.
https://doc.traefik.io/traefik/v1.7/configuration/acme/#domains
But i dont see how to use this here, maybe to switch to toml config instead of commands with the traefik image?

Checking the logs i see:

Datastore sync error: object lock value: expected ...

Seems related to: traefik/traefik#3487

Expected behavior
Traefik should automatically request letsencrypt certificates for known subdomains.

ivoba commented

Switching to acme.json as store instead of Consul makes at least the main domain obtain a letsencrypt certificate.