Custom SSL Certificates

If you want to use custom SSL certificates with Traefik, you can easily do so by following the steps below.

On each server, /data/coolify/proxy is mounted into the Coolify Proxy (Traefik) container.

You can add your custom SSL certificates in the /data/coolify/proxy/certs directory.

1. Generate or request an SSL certificate for your domain. It can be a self-signed certificate, a certificate from a public CA, or a certificate from Let's Encrypt.

   Read more here about certbot and Let's Encrypt.

2. Copy the key and cert files to the server where your resource that will use the certificate is running. Use scp or any other method to copy the files.

   It should be placed under /data/coolify/proxy directory, for example:

   scp /path/to/your/domain.cert root@your-server-ip:/data/coolify/proxy/certs/domain.cert
   scp /path/to/your/domain.key root@your-server-ip:/data/coolify/proxy/certs/domain.key

3. You can configure Traefik to use the custom SSL certificates by adding a dynamic configuration file through Coolify's UI or directly adding it to /data/coolify/proxy/dynamic:

   tls:
     certificates:
       - certFile: /traefik/certs/domain.cert
         keyFile: /traefik/certs/domain.key
       - certFile: /traefik/certs/domain2.cert
         keyFile: /traefik/certs/domain2.key

Traefik will automatically use this certificate if it matches the domain of the incoming request and the certificate in any of the provided files.

For more information check Traefik's official documentation.