LetsEncrypt DNS validation failing

#1

I’m trying to setup traefik with LetsEncrypt

When running my docker compose up, I get the following error in my logs:

acme: Error -> One or more domains had a problem:\n[mydomain.org] [mydomain.org] acme: error presenting token: cloudflare: failed to find zone org.: Zone could not be found\n"
acme: Error -> One or more domains had a problem:\n[.mydomain.org] [.mydomain.org] acme: error presenting token: cloudflare: failed to find zone org.: Zone could not be found\n"

My domain is setup in CloudFlare, and dig NS shows that the NS servers are cloudflare servers.

I don’t see any TXT record being created.

I’m using the e-mail address I use to login and my global API key.

Any ideas what might be causing this ?

Thanks!

0 Likes

#2

Why do you need LetsEncrypt Certificate while CF provides a free one?

0 Likes

#3

Using Traefik for an edge router.

0 Likes

#4

I don’t expect Acme to create a TXT record. Maybe Traefik uses a special implementation that uses the Cloudflare API.

By chance, will Traefik let you use your own certificate? Like the Cloudflare Origin CA Certificate?

0 Likes

#5

This is working now. Key change was to set resolvers in the [acme.dnsChallenge] section.
ACME now creates the TXT record as expected and letsencrypt certs are issued appropriately.

2 Likes