Bad Gateway when Domain points to HTTPS service

[eximius313]

To Reproduce

1. Setup container that supports HTTPS access (for example N8N)
2. Create Domain that points to HTTPS port and enable HTTPS switch
3. Open the browser

Current vs. Expected behavior

Current:
Browser dieplays "Bad Gateway"

Expected:
Domain routes to HTTPS

Provide environment information

Operating System:
* Ubuntu 24

Dokploy:
* Version v0.25.5

Which area(s) are affected? (Select all that apply)

Docker Compose

Are you deploying the applications where Dokploy is installed or on a remote server?

Same server where Dokploy is installed

Additional context

• When pointing the Domain to regular HTTP port with HTTPS switch OFF-> everything works (HTTP->HTTP)
• When pointing the Domain to regular HTTP port with HTTPS switch ON -> everything works (HTTPS->HTTP)
• When pointing the Domain to HTTPS with HTTPS switch OFF -> 404 page not found (HTTP->HTTPS)
• When pointing the Domain to HTTPS with HTTPS switch ON -> Bad Gateway (HTTPS->HTTPS)

Will you send a PR to fix it?

Maybe, need help

[djsisson]

since you are using a proxy/load balancer in traefik it is usual that traefik terminates the ssl connection and just uses http-http for the last step to the container.
if your container does require https, then you would either need to provide your container with a valid certificate such that traefik can perform the tls handshake, or set insecureSkipVerify to true to ignore certificate warnings

[eximius313]

@djsisson ,

if your container does require https

yes

then you would either need to provide your container with a valid certificate such that traefik can perform the tls handshake,

It has self signed. Is that considered "valid"?

insecureSkipVerify to true to ignore certificate warnings

where can I set it?

[djsisson]

@eximius313

reference

https://doc.traefik.io/traefik/reference/routing-configuration/http/load-balancing/serverstransport/#opt-insecureSkipVerify

[eximius313]

Thank you @djsisson .

I've added insecureSkipVerify: true to my /etc/dokploy/traefik/dynamic/dokploy.yml (and reloaded traefik):

But unfortunatelly this did not work :(

[djsisson]

Its a servers transport option only, which is static config.
Either add to default or create new servers transport and specify in your apps loadbalancer, tgis has nothing to do with dokploy service itself

[eximius313]

@djsisson ,

I've corrected the config to:

And verified in logs, that there are no errors and... I think I've found the root cause:
Although I've explicitly set Certificate provider to none:

Something (Dokploy? Traefik?) still tries to use Let's Encrypt:

[Siumauricio]

Using the n8n template, and using a custom domain following the docs in my case that I'm using cloudflare https://docs.dokploy.com/docs/core/domains/cloudflare works fine

[djsisson]

@eximius313 ok i must have misunderstood what you were trying to do, if you are using your own certificate to browse to a domain then you just need to add it to traefik, the servers transport is for inter container communication, which you do not need to alter

https://doc.traefik.io/traefik/reference/routing-configuration/http/tls/tls-certificates/
you would also need to add them to your pc certifcate store as they are self signed.

[eximius313]

@Siumauricio - please notice, that in your example N8N_PROTOCOL is http and SSL is provided by CloudFlare - which is not my case. In my case I have N8N_PROTOCOL set to https along with N8N_SSL_CERT and N8N_SSL_KEY and "Domain" is pointed to 443 port

@djsisson - I'll look into it

[Siumauricio]

Feel free to explore. I don't think this is a dokploy error. Bad gateways can occur for several reasons, the most common being:

1. Using an invalid port in the domain definition
2. Using invalid health checks in your compose file
3. There may be an internal problem in n8n that prevents you from achieving what you want, or you may need to do something more specific with traefik.

I do not believe it is a dokploy issue as such. I will pass it on to discussions to keep the issues with bugs and features clean!

Thank you