DNS and Network setup for Cloudflare

Website, Application, Performance DNS & Network
1

What is the name of the domain?

stratim.tech

What is the issue you’re encountering

I can understand

What feature, service or problem is this related to?

DNS records

What are the steps to reproduce the issue?

Hello everyone, I have a task
configure Traefik with ACME to receive certificates for *.stratim.tech at the IP address 46.XXX.XXX.XXX while the stratim.tech site itself is located at 185.XXX.XXX.XXX

How to do this?

Screenshot of the error

Снимок экрана 2025-02-25 в 11.33.30.jpg
Снимок экрана 2025-02-25 в 11.33.30.jpg1260×417 81.9 KB

2

If you have a specific IP address, it’s better to use an A record.

A   *   46.XXX.XXX.XXX   Auto   DNS only
A   @   46.XXX.XXX.XXX   Auto   DNS only

To pass the ACME challenge with Traefik, it’s better to disable proxying to avoid issues with certificates.
Also, remember that a CNAME record cannot be set for the root domain (e.g., stratim.tech).
For the root domain, you need to use an A record.

3

Hi, Thanx for you time, as you can see - proxy is disabled in DNS page . stratim.tech is my root domain and it address point to company website hosting ( IP 185.XXX.XXX.XXX) . If I understood you right - you suggest to create record A @ 46.XXX.XXX.XXX Auto DNS only. for stratim.tech ?

5

Снимок экрана 2025-02-25 в 13.07.11
Снимок экрана 2025-02-25 в 13.07.111017×273 42.7 KB

Like that? And website will be available on IP 185.XXX.XXX.XXX and Traefik will ACME certs on 46.XXX.XXX.XXX ?

6

Nope - it doesn’t worked - after I did that - web site became unavalable - so I need Traefik to ACME cert on 46.XXX.XXX.XXX ip address, but web site stay available on 185.XXX.XXX.XXX ip address

7

It appears that the current IP address for the root domain is 185.XXX.XXX.XXX, while 46.XXX.XXX.XXX is used for the subdomains *.stratim.tech.

If you want your main website and subdomains to operate on different servers or services, you will need different IP addresses. However, if you want both the root domain and the subdomains to point to the same server, you can use the same IP address for both records.

Here’s how it might look if you want to use one IP for everything:

A record for the root domain:

A   @   185.XXX.XXX.XXX   Auto   DNS only

A record for the subdomains:

A   *   185.XXX.XXX.XXX   Auto   DNS only

This way, all requests to stratim.tech and its subdomains will be directed to the same IP address.

On the other hand, if you want to use different IPs, the records would look like this:

A record for the root domain:

A   @   185.XXX.XXX.XXX   Auto   DNS only

A record for the subdomains:

A   *   46.XXX.XXX.XXX   Auto   DNS only
8

If I do this

A record for the root domain:

A   @   185.XXX.XXX.XXX   Auto   DNS only

A record for the subdomains:

A   *   46.XXX.XXX.XXX   Auto   DNS only

Traefik will generate cert for 46.XXX.XXX.XXX ip address?

9

Yes! Traefik will be able to generate a certificate for the IP address 46.XXX.XXX.XXX , but only if you use it for subdomains, and if those subdomains are properly configured and accessible.

1 Like
10

Thank you very much!

11

Are you trying to provision a wildcard certificate (*.stratim.tech) or a certificate that covers a few specific subdomains (sub1.stratim.tech, sub2.stratim.tech…)?

12

I’m trying to obtain wildcard cert for *.stratim.tech

13

I’m using DNS Challenge method

14

If you’re using the docker image, have a look at this:

15

I’m appreciate your participance, I’m quite familiar with Traefk, and right now try to run it’s version 3 for the first time, this article for version 3? Cause there some differences in syntax and service manifestation between v2 and v3 of Traefik

17

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.