Quick Installer Sets Incorrect Values for Traefik Causing SSL Cert Renewal Issues #865

New Issue

MrUnknownDE · 2026-04-05T17:53:33+02:00

MrUnknownDE commented

2026-04-05 17:53:33 +02:00

Originally created by @VashEXE on 9/24/2025

Version: v1.9.4
OS: Ubuntu 24.04
linux_amd64
Docker

Using the installer works as expected during setup. All values are entered as requested by Pangolin, but in the Traefik dynamic_config.yml the Host value for all of the rules is entered as:

https://pangolin.my.domain

rather than the correct value:

pangolin.my.domain

The initial installation seems to generate the letsencrypt certs as expected, but when renewal time comes around an error is generated stating:

traefik | {"level":"error","providerName":"letsencrypt.acme","acmeCA":"https://acme-v02.api.letsencrypt.org/directory","providerName":"letsencrypt.acme","ACME CA":"https://acme-v02.api.letsencrypt.org/directory","routerName":"ws-router@file","rule":"Host(`https://pangolin.my.domain`)","error":"unable to generate a certificate for the domains [https://pangolin.my.domain]: acme: error: 400 :: POST :: https://acme-v02.api.letsencrypt.org/acme/new-order :: urn:ietf:params:acme:error:rejectedIdentifier :: Invalid identifiers requested :: Cannot issue for \"https://pangolin.my.domain\": Domain name contains an invalid character","domains":["https://pangolin.my.domain"],"time":"2025-09-24T02:36:49Z","message":"Unable to obtain ACME certificate for domains"}

After manually removing the https:// from all instances of the host name in the dynamic_config.yml the cert generates as expected and works fine. I'm unsure if this is an issue with the installer itself or where this problem is, but I actually documented my installer output and noted that I explicitly entered pangolin.my.domain and not https://pangolin.my.domain , but still ended up having that https:// added in the dynamic config which causes Let's Encrypt cert renewal to fail.

Let me know if there is any other info I can provide on this.

Thanks!

*Originally created by @VashEXE on 9/24/2025* **Version:** v1.9.4 **OS:** Ubuntu 24.04 linux_amd64 Docker Using the installer works as expected during setup. All values are entered as requested by Pangolin, but in the Traefik dynamic_config.yml the Host value for all of the rules is entered as: ```https://pangolin.my.domain``` rather than the correct value: ```pangolin.my.domain``` The initial installation seems to generate the letsencrypt certs as expected, but when renewal time comes around an error is generated stating: ``` traefik | {"level":"error","providerName":"letsencrypt.acme","acmeCA":"https://acme-v02.api.letsencrypt.org/directory","providerName":"letsencrypt.acme","ACME CA":"https://acme-v02.api.letsencrypt.org/directory","routerName":"ws-router@file","rule":"Host(`https://pangolin.my.domain`)","error":"unable to generate a certificate for the domains [https://pangolin.my.domain]: acme: error: 400 :: POST :: https://acme-v02.api.letsencrypt.org/acme/new-order :: urn:ietf:params:acme:error:rejectedIdentifier :: Invalid identifiers requested :: Cannot issue for \"https://pangolin.my.domain\": Domain name contains an invalid character","domains":["https://pangolin.my.domain"],"time":"2025-09-24T02:36:49Z","message":"Unable to obtain ACME certificate for domains"}``` After manually removing the https:// from all instances of the host name in the dynamic_config.yml the cert generates as expected and works fine. I'm unsure if this is an issue with the installer itself or where this problem is, but I actually documented my installer output and noted that I explicitly entered ```pangolin.my.domain``` and not ```https://pangolin.my.domain``` , but still ended up having that https:// added in the dynamic config which causes Let's Encrypt cert renewal to fail. Let me know if there is any other info I can provide on this. Thanks!

MrUnknownDE closed this issue

2026-04-05 17:53:33 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug bug needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating needs investigating

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#865