WIP: Use ACME (letsencrypt)

[eriksjolund]

Currently untested. I don't have access to any suitable test computer right now.

Currently uses

--certificatesresolvers.myresolver.acme.caserver=https://acme-staging-v02.api.letsencrypt.org/directory 

in mytraefik.container to facilitate testing. (Could later be removed)

Use dual-stack socket in socket units.

Dual-stack socket was requested in

• caddy.socket should probably bind to [::] instead of 0.0.0.0 podman-caddy-socket-activation#17

(I'm asuming dual-stack socket makes sense for traefik too)

Fixes: #10

[pieterdt]

In my experience so far (based on extending example1 to use https: as soon as you add the mynet network to the container, the container is no longer able to reach the CA (letsencrypt). If you add host networking to traefik, then it can no longer reach the whoami container by name. I'm too new in this domain to figure out how to solve this. Any suggestions would be greatly appreciated.

[eriksjolund]

I think we need to remove `Internal=true` https://github.com/eriksjolund/podman-traefik-socket-activation/blob/4a7ab58b5778f98cf1f1a0d539dc04a51e0ba229/examples/example1/mynet.network#L3 because that configuration prevents the traefik container from connecting to the internet. (Traefik need connect to letsencrypt) See also https://github.com/eriksjolund/podman-traefik-socket-activation/blob/main/examples/example1/README.md#using-internaltrue

…

On Wed, Feb 18, 2026 at 9:27 AM Pieter ***@***.***> wrote: *pieterdt* left a comment (eriksjolund/podman-traefik-socket-activation#15) <#15 (comment)> In my experience so far (based on extending example1 to use https: as soon as you add the mynet network to the container, the container is no longer able to reach the CA (letsencrypt). If you add host networking to traefik, then it can no longer reach the whoami container by name. I'm too new in this domain to figure out how to solve this. Any suggestions would be greatly appreciated. — Reply to this email directly, view it on GitHub <#15 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAA2C7NC7DP6D5JQ5XYB4ND4MQPADAVCNFSM6AAAAACVQLS6G2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZTSMJZGM4TEOBUGM> . You are receiving this because you authored the thread.Message ID: ***@***.*** com>