Traefik Manager

Appearance

Star

Certs Tab ​

The Certs tab shows TLS certificates managed by Traefik, read from two sources:

  • ACME (acme.json) - certificates issued and renewed automatically by Traefik's ACME resolvers (Let's Encrypt, ZeroSSL, etc.)
  • File-based (tls.yml) - PEM certificates declared under tls.certificates in any loaded dynamic config file

What it shows ​

  • Domain (main domain + SANs)
  • ACME resolver name (or file for PEM certs)
  • Expiry date (parsed from the certificate)
  • Source cert file path (for PEM certs)

Certificates are read-only - they are issued and renewed automatically by Traefik. To revoke or force a renewal, do so via your Traefik configuration.

Enabling the tab ​

During setup wizard ​

Toggle Certs on in the "Optional monitoring" step.

After setup ​

Go to Settings → System Monitoring and enable Certs.

Requirements ​

ACME certificates (acme.json) ​

Point traefik-manager at your acme.json via the ACME_JSON_PATH environment variable (default: /app/acme.json).

yaml
volumes:
  - /path/to/traefik/acme.json:/app/acme.json:ro

Tip: Mount it read-only (:ro) - traefik-manager never writes to acme.json.

File-based certificates (tls.yml) ​

No extra configuration needed. traefik-manager automatically scans all loaded dynamic config files for tls.certificates entries and reads each certFile PEM directly.

Example tls.yml:

yaml
tls:
  certificates:
    - certFile: /etc/traefik/certs/chain.pem
      keyFile: /etc/traefik/certs/key.pem

Make sure traefik-manager has read access to the cert files. On native Linux installs:

bash
chmod o+r /etc/traefik/certs/chain.pem

If acme.json is not found, the tab shows an error with the path it expected and the env var to set. File-based certs are still shown if available.