Traefik:v3.3 > Cloudflare Tunnel and/or DDNS

Zero Trust
1

What is the name of the domain?

dorahelper.com (Cloudflare Free)

Related to

Cloudflare Tunnel

What is the error number?

DNS Challenge not working > portainer.dorahelper.com

What is the error message?

Where to find error message ?

What is the issue you’re encountering

DNS Challenge> No acces

What steps have you taken to resolve the issue?

version: “3.3”

services:
  traefik:
    image: "traefik:v3.3"
    container_name: "traefik"
    restart: always
    command:
      - "--log.level=DEBUG"
      - "--api.dashboard=true"
      - "--api.insecure=true"
      - "--providers.docker=true"
      - "--providers.docker.exposedbydefault=false"
      - "--entryPoints.web.address=:80"
      - "--entryPoints.websecure.address=:443"
      - "--certificatesresolvers.myresolver.acme.dnschallenge=true"
      - "--certificatesresolvers.myresolver.acme.dnschallenge.provider=cloudflare"
      - "--certificatesresolvers.myresolver.acme.email=REDACTED"
      - "--certificatesresolvers.myresolver.acme.storage=/letsencrypt/acme.json"
    ports:
      - "80:80"
      - "443:443"
      - "8080:8080"
    environment:
      - "CF_API_TOKEN=${CF_API_TOKEN}"
    volumes:
      - "./letsencrypt:/letsencrypt"
      - "/var/run/docker.sock:/var/run/docker.sock:ro"

  whoami:
    image: "traefik/whoami"
    container_name: "whoami"
    restart: always
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.whoami.rule=Host(`whoami.example.com`)"
      - "traefik.http.routers.whoami.entrypoints=websecure"
      - "traefik.http.routers.whoami.tls.certresolver=myresolver"

  portainer:
    image: "portainer/portainer-ce:latest"
    container_name: "portainer"
    restart: always
    ports:
      - "9000:9000"
      - "9443:9443"
    volumes:
      - "/var/run/docker.sock:/var/run/docker.sock"
      - "portainer_data:/data"
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.portainer.rule=Host(`portainer.dorahelper.com`)"
      - "traefik.http.routers.portainer.entrypoints=websecure"
      - "traefik.http.routers.portainer.tls.certresolver=myresolver"

volumes:
  portainer_data:

What are the steps to reproduce the issue?

Tell me where to troubleshoot here inb the forum, or contact me directly at:
christian.voresid.com

2

I also run Portainer, but without Traefik using Cloudflared Tunnel and no SSL on the origin, meaning the noTLSVerify option is enabled for the Zero Trust public hostname of the particular installed and running tunnel on the device/machine.

Furthermore, may I ask does your Portainer interface load fine when you temporary Pause Cloudflare or disable proxy :orange: ? :thinking:

To test out:

  • Use the “Pause Cloudflare on Site” option from the Overview tab for your domain at dash.cloudflare.com .
  • The link is in the lower right corner of that page.

Since related to the Portainer, here’s a helpful post: