Traefik and cloudflare

[mosquitodawg]

Sorry I don't really understand this stuff.

I have a made a cloudflare account with zone:read and zone:edit api tokens.
I have put them in the .env in the following properties
CLOUDFLARE_EMAIL
CLOUDFLARE_DNS_API_TOKEN
CLOUDFLARE_ZONE_API_TOKEN

But I get the error below in traefik logs. Seems like I should change the domain. But does this require I make a domain which will cost money?

ERR Unable to obtain ACME certificate for domains error="unable to generate a certificate for the domains [localhost]: acme: error: 400 :: POST :: https://acme-v02.api.letsencrypt.org/acme/new-order :: urn:ietf:params:acme:error:rejectedIdentifier :: Invalid identifiers requested :: Cannot issue for "localhost": Domain name needs at least one dot" ACME CA=https://acme-v02.api.letsencrypt.org/directory acmeCA=https://acme-v02.api.letsencrypt.org/directory domains=["localhost"] providerName=myresolver.acme routerName=homepage@docker rule="(Host(localhost) && PathPrefix(/))"

[AdrienPoupa]

That's right, your HOSTNAME variable is set to localhost in your .env, it should be set up your domain that you're controlling in CloudFlare.

[mosquitodawg]

Thanks for the response! Well I gave up on getting this domain thing to work. Im just trying to use the local IP but it's still not working completely. Thanks for this project btw, its really awesome!

In .env file I put
HOSTNAME=192.168.0.45
DNS_CHALLENGE=false

I get the homepage at https://192.168.0.45/ ,
qbittorrent at https://192.168.0.45/qbittorrent ,
and Jellyfin and jellySeerr

But I do not get Sonarr at https://192.168.0.45/sonarr ,
Radarr at https://192.168.0.45/radarr ,
Prowlarr at https://192.168.0.45/prowlarr
and bazarr at https://192.168.0.45/bazarr

Also I get this in the traefik logs.
domains error="cannot get ACME client ACME challenge not specified, please select TLS or HTTP or DNS Challenge" ACME CA=https://acme-v02.api.letsencrypt.org/directory acmeCA=https://acme-v02.api.letsencrypt.org/directory domains=["192.168.0.45"] providerName=myresolver.acme routerName=homepage@docker rule="(Host(192.168.0.45) && PathPrefix(/))"
2024-12-09T14:51:27Z ERR Unable to obtain ACME certificate for domains error="cannot get ACME client ACME challenge not specified, please select TLS or HTTP or DNS Challenge" ACME CA=https://acme-v02.api.letsencrypt.org/directory acmeCA=https://acme-v02.api.letsencrypt.org/directory domains=["192.168.0.45"] providerName=myresolver.acme routerName=homepage@docker rule="(Host(192.168.0.45) && PathPrefix(/))"
2024-12-09T14:51:45Z ERR Unable to obtain ACME certificate for domains error="cannot get ACME client ACME challenge not specified, please select TLS or HTTP or DNS Challenge" ACME CA=https://acme-v02.api.letsencrypt.org/directory acmeCA=https://acme-v02.api.letsencrypt.org/directory domains=["192.168.0.45"] providerName=myresolver.acme routerName=sonarr@docker rule="(Host(192.168.0.45) && PathPrefix(/sonarr))"
2024-12-09T14:51:47Z ERR Unable to obtain ACME certificate for domains error="cannot get ACME client acme: error: 429 :: POST :: https://acme-v02.api.letsencrypt.org/acme/new-acct :: urn:ietf:params:acme:error:rateLimited :: too many new registrations (10) from this IP address in the last 3h0m0s, retry after 2024-12-09 14:55:36 UTC: see https://letsencrypt.org/docs/rate-limits/#new-registrations-per-ip-address" ACME CA=https://acme-v02.api.letsencrypt.org/directory acmeCA=https://acme-v02.api.letsencrypt.org/directory domains=["192.168.0.45"] providerName=myresolver.acme routerName=bazarr@docker rule="(Host(192.168.0.45) && PathPrefix(/bazarr))"
2024-12-09T14:52:17Z ERR Unable to obtain ACME certificate for domains error="cannot get ACME client acme: error: 429 :: POST :: https://acme-v02.api.letsencrypt.org/acme/new-acct :: urn:ietf:params:acme:error:rateLimited :: too many new registrations (10) from this IP address in the last 3h0m0s, retry after 2024-12-09 14:55:36 UTC: see https://letsencrypt.org/docs/rate-limits/#new-registrations-per-ip-address" ACME CA=https://acme-v02.api.letsencrypt.org/directory acmeCA=https://acme-v02.api.letsencrypt.org/directory domains=["192.168.0.45"] providerName=myresolver.acme routerName=sonarr@docker rule="(Host(192.168.0.45) && PathPrefix(/sonarr))"

I thought setting DNS_CHALLENGE to false would remove the whole ACME thing.
Any thoughts on how to make it work?

[AdrienPoupa]

If you insist on using a local IP, you're probably better off just removing all the ACME lines from the Traefik container:

      - --certificatesresolvers.myresolver.acme.dnschallenge=${DNS_CHALLENGE:-true}
      - --certificatesresolvers.myresolver.acme.dnschallenge.provider=${DNS_CHALLENGE_PROVIDER:-cloudflare}
      - --certificatesresolvers.myresolver.acme.dnschallenge.resolvers=1.1.1.1:53,8.8.8.8:53
      - --certificatesresolvers.myresolver.acme.caserver=${LETS_ENCRYPT_CA_SERVER:-https://acme-v02.api.letsencrypt.org/directory}
      - --certificatesresolvers.myresolver.acme.email=${LETS_ENCRYPT_EMAIL}
      - --certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json

You're missing out on what Traefik has to offer though, and this will use self-signed certificates instead of Let's Encrypt valid certs, and some apps may not work (Jellyfin Android application for example)