# Enable ACME (Let's Encrypt): automatic SSL. # Email address used for registration. # # Required # --certificatesResolvers.le.acme.email=test@traefik.io # File or key used for certificates storage. # # Required # --certificatesResolvers.le.acme.storage=acme.json # CA server to use. # Uncomment the line to use Let's Encrypt's staging server, # leave commented to go to prod. # # Optional # Default: "https://acme-v02.api.letsencrypt.org/directory" # --certificatesResolvers.le.acme.caServer=https://acme-staging-v02.api.letsencrypt.org/directory # KeyType to use. # # Optional # Default: "RSA4096" # # Available values : "EC256", "EC384", "RSA2048", "RSA4096", "RSA8192" # --certificatesResolvers.le.acme.keyType=RSA4096 # Use a TLS-ALPN-01 ACME challenge. # # Optional (but recommended) # --certificatesResolvers.le.acme.tlsChallenge=true # Use a HTTP-01 ACME challenge. # # Optional # --certificatesResolvers.le.acme.httpChallenge=true # EntryPoint to use for the HTTP-01 challenges. # # Required # --certificatesResolvers.le.acme.httpChallenge.entryPoint=web # Use a DNS-01 ACME challenge rather than HTTP-01 challenge. # Note: mandatory for wildcard certificate generation. # # Optional # --certificatesResolvers.le.acme.dnsChallenge=true # DNS provider used. # # Required # --certificatesResolvers.le.acme.dnsChallenge.provider=digitalocean # By default, the provider will verify the TXT DNS challenge record before letting ACME verify. # If delayBeforeCheck is greater than zero, this check is delayed for the configured duration in seconds. # Useful if internal networks block external DNS queries. # # Optional # Default: 0 # --certificatesResolvers.le.acme.dnsChallenge.delayBeforeCheck=0 # Use following DNS servers to resolve the FQDN authority. # # Optional # Default: empty # --certificatesResolvers.le.acme.dnsChallenge.resolvers=1.1.1.1:53,8.8.8.8:53 # Disable the DNS propagation checks before notifying ACME that the DNS challenge is ready. # # NOT RECOMMENDED: # Increase the risk of reaching Let's Encrypt's rate limits. # # Optional # Default: false # --certificatesResolvers.le.acme.dnsChallenge.disablePropagationCheck=true