Fix the Traefik default self-signed certificate
Error: TRAEFIK DEFAULT CERT / self-signed certificate
Traefik has no HTTPS router matching this domain, so it falls back to its built-in self-signed cert.
The container is running but Traefik has no router rule for this exact host, or the router is on the http entrypoint only. Coolify writes these labels from the Domains field — if the host there does not match what you are visiting, no router is created.
The fix
Inspect the container’s Traefik labels and check for an https router for your exact domain:
docker inspect <container-id> --format '{{range $k,$v := .Config.Labels}}{{$k}}={{$v}}{{"\n"}}{{end}}' | grep -i "host\|rule\|entrypoint\|tls\|certresolver"Confirm you see: an entryPoints=https router, rule=Host(`your-domain.com`) matching exactly, tls=true, and tls.certresolver=letsencrypt.
If the host does not match or there is no https router, fix the Domains field in Coolify so it is the exact domain (https://), then redeploy.
Verify it worked
A "self-signed certificate" line here means Traefik still has no router — recheck the host rule:
curl -sv --max-time 10 https://your-domain.com 2>&1 | grep "self-signed\|subject"Related Coolify errors
- NET::ERR_CERT_AUTHORITY_INVALID
- acme: error: 429 :: POST :: too many certificates already issued for exact set of domains, retry after ...
- unable to obtain ACME certificate for domains "your-domain.com": unable to generate a certificate for the domains [your-domain.com]: error: one or more domains had a problem: [your-domain.com] acme: error presenting token / authorization failed
- ERR_TOO_MANY_REDIRECTS — This page isn't working. your-domain.com redirected you too many times.