Traefik：让我们加密+其他证书

Question

我有3个节点swarm，我希望使用TRAEFIK和Let＆＃39; sEncryp以及我自己的公司www.tbs-internet.com生成的证书。可能吗？目前它适用于Let的加密，但不适用于我的其他证书。 使用配置文件，我在Traefik的日志中出现以下错误：

time="2017-07-05T12:07:57Z" level=info msg="Preparing server http &{Network: Address::80 TLS:<nil> Redirect:<nil> Auth:0xc420339360 Compress:false}"
time="2017-07-05T12:07:57Z" level=info msg="Preparing server https &{Network: Address::443 TLS:0xc4204fe600 Redirect:<nil> Auth:0xc4203396c0 Compress:false}"
time="2017-07-05T12:07:57Z" level=info msg="Starting server on :80"
time="2017-07-05T12:07:57Z" level=error msg="Error creating TLS config: tls: failed to parse private key"
time="2017-07-05T12:07:57Z" level=fatal msg="Error preparing server: tls: failed to parse private key"

traefik.toml

defaultEntryPoints = ["http", "https"]

[entryPoints]
 [entryPoints.http]
 address = ":80"
 [entryPoints.https]
 address = ":443"
  [entryPoints.https.tls]
   [[entryPoints.https.tls.certificates]]
   CertFile = "/tls/fs/preprod.appx.mydomainA.com.cert"
   KeyFile = "/tls/fs/preprod.appx.mydomainA.com.key"

[acme]
email = "xxxxxxxxxxxxxxxxxxx"
storage = "acme.json"
entryPoint = "https"
onDemand = true

[[acme.domains]]
 main = "admin.mydomainC.com"

[web]
address = ":8080"

Traefik的docker-compose.yml

version: '3'

services:
  proxy-prod:
    image: traefik:v1.3.1-alpine
    command: --web --docker --docker.swarmmode --docker.domain=traefik.admin.mydomainC.com --docker.watch --logLevel=DEBUG
    networks:
      - net-prod
    ports:
      - "80:80"
      - "443:443"
      - "8080:8080"
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - $PWD/traefik.toml:/traefik.toml
      - "/home/swarm/ssl:/tls"
    deploy:
      mode: global

networks:
 net-prod:
  driver: overlay
  external:
   name: net-prod

app1的docker-compose.yml

version: '3'

networks:
 net-prod:
  driver: overlay
  external:
   name: net-prod

services:
  app1:
    image: private/app1
    networks:
      - net-prod
    deploy:
      labels:
        - "traefik.backend=app1"
        - "traefik.frontend.rule=Host:app1.app.mydomainC.com,preprod.appx.mydomainA.com"
        - "traefik.docker.network=net-prod"
        - "traefik.port=9001"
      replicas: 1

你有什么想法吗？

app1服务有两个网址：

• app1.app.mydomainC.com：使用加密
• preprod.appx.mydomainA.com：我公司自己的证书www.tbs-internet.com