Sometimes i get traefik invalid cert instead of my real one

[VinterSolen]

Describe the Bug

Sometimes, i get traefik's invalid cert instead of the one for my domain.. It happens little random
Cant the pangolin servivce update the traefik certs when it has one or something?

Running the all in one docker setup, via the install script.

Environment

• OS Type & Version: debian 13
• Pangolin Version: 1.17.0
• Gerbil Version: dunno
• Traefik Version: dunno
• Newt Version: dunno
• Olm Version: (if applicable)

To Reproduce

Expected Behavior

no invalid cert usage

[LaurenceJJones]

Cant the pangolin servivce update the traefik certs when it has one or something?

Pangolin is not in control of certs, traefik is the only one handling them.

Depends when this is happening as typically in my own experience the traefik cert shows when i register a new service and its the time between when LetsEncrypt succeeds and traefik deploys the cert.

Can you elaborate more when you are seeing this? as your issue is quite light on details.

[AstralDestiny]

Doing http validation? or dns validation? do see that happen with http validation and depending how you are hitting it

Also can you do log.level=trace in config/traefik/traefik_config.yml

log:
 level: trace # might be info right now

Then try and hit it see what happens, Traefik relies on host headers to be given with the connection if they aren't there or the cert hasn't succeeded yet then you get the default cert.

[VinterSolen]

Cant the pangolin servivce update the traefik certs when it has one or something?

Pangolin is not in control of certs, traefik is the only one handling them.

Depends when this is happening as typically in my own experience the traefik cert shows when i register a new service and its the time between when LetsEncrypt succeeds and traefik deploys the cert.

Can you elaborate more when you are seeing this? as your issue is quite light on details.

Hi. I have only one domain and sites setup long time now. Like prowlarr.domaint.ext has been pointing towards prowlarr on the server, untouched for weeks. like on friday (this is currently on my work computer) it loaded with the real certificate of my domain with wildcard. Some pages seems to get the real cert after a while, and some seems to get stuck on traefiks self generated one.

Im not sure how to troubleshoot this mores since its seems to be sporadically only

[VinterSolen]

Doing http validation? or dns validation? do see that happen with http validation and depending how you are hitting it

Also can you do log.level=trace in config/traefik/traefik_config.yml

log:
 level: trace # might be info right now

Then try and hit it see what happens, Traefik relies on host headers to be given with the connection if they aren't there or the cert hasn't succeeded yet then you get the default cert.

My cert is setup with HTTP-Challenge

The only log i find is access.log but this doesnt seem to get any logs when the cert fails

I put trace in the log.level and restarted the docker containers, i guess i need to reload some pages and perhaps try catch something

[AstralDestiny]

Didn't you say wildcard? You can't get wildcard domains on http validation.

[VinterSolen]

Didn't you say wildcard? You can't get wildcard domains on http validation.

It shows *.domain.ext and domain.ext on Domains -> my domain.

[AstralDestiny]

You need DNS validation for that to work.. which involves placing a env secret into your traefik too.

Which does mean would need to update the dashboard to say this or reflect it. as wildcards are not abl to be obtained at all in any capacity on HTTP or TLS validation