let's encrypt and dashboard?

[MihaMarkic]

Hi guys, looking at #880, there is stated that dashboard requires a certificate to work with SSL.
Now, I wonder, is it possible to use let's encrypt for this instead?

[MihaMarkic]

It works just fine with Let's encrypt.

[genti-t]

@MihaMarkic can you share how you managed to do that ?
Are you using traefik in HA, (cluster mode ?)

I'm using traefik with etcd as KV store, and kubernetes as backend, with let's encrypt.
I think is not working for the same reason in #926
Just want to make sure i got every thing right.

here is my config (store on etcd):

    logLevel = "INFO"
    defaultEntryPoints = ["http", "https"]

    [acme]
    email = "hidden_mail_address@gmai.com"
    entryPoint = "https"
    OnHostRule = true
    storage = "traefik/acme/account"
    onDemand = true
    # Comment out for production environment!
    # caServer = "https://acme-staging.api.letsencrypt.org/directory"
    [[acme.domains]]
      main = "doamin_hidden.it"
      sans = ["traefik.doamin_hidden.it"]

    [entryPoints]
    [entryPoints.http]
    address = ":80"
    [entryPoints.http.redirect]
    entryPoint = "https"
    [entryPoints.https]
    address = ":443"
    [entryPoints.https.tls]

    [web]
    address = ":8083"
    CertFile = "traefik.crt"
    KeyFile = "traefik.key"

    [web.auth.basic]
    users = ["admin:$***************************"]

    [kubernetes]
    endpoint = "http://127.0.0.1:8080"

I would really appreciate any help

[genti-t]

I can confirm that problem I have is regarding the usage of etcd e acme.
I tried with a single replica with no etcd usage for KV store, and it works perfectly.
Thanx

[MihaMarkic]

@genti-t I'm running something like this:

logLevel = "WARN"
defaultEntryPoints = ["http", "https"]
################################################################
# Web configuration backend
################################################################
[web]
  [web.auth.basic]
  users = ["SOMEUSERNAME:SOMEHASH"]
################################################################
# Docker configuration backend
################################################################
[docker]
domain = "SOMEDOMAIN"
watch = true

[entryPoints]
  [entryPoints.http]
  address = ":80"
    [entryPoints.http.redirect]
      entryPoint = "https"
  [entryPoint.httpWeb]
  address = ":8080"
    [entryPoint.http.redirect]
      entryPoint = "https"
  [entryPoints.https]
  address = ":443"
    [entryPoints.https.tls]

[acme]
# logging = true
email = "SOMEEMAIL"
storage = "etc/traefik/acme/acme.json"
entryPoint = "https"
onDemand = true
onHostRule = true