Traefik's Built-in Let's Encrypt: Picking the Right ACME Challenge for Your Network
Traefik can issue and renew Let's Encrypt certificates automatically, but the choice between HTTP-01 and DNS-01 challenges determines whether it works behind a firewall or in containers.