Hi, until now I have been using fleet with the corresponding ssl/tls certificate. now i need to use it in clear http and not https, as i want to make sure to handle tls with traefik reverse proxy. currently the configuration is as follows, but every time i try to access the gui, i get 404 page not found error and in the logs i see tls handshake error.

version: '3.9'
services:
  mailhog:
    restart: always
    container_name: Fleet_Mailhog
    image: mailhog/mailhog:latest
    ports:
      - "8025:8025"
      - "1025:1025"
    networks:
      - Proxy

  redis:
    restart: always
    container_name: Fleet_Redis
    image: redis
    ports:
      - "6379:6379"
    command: redis-server --requirepass ************************
    volumes:
      - /data/docker/appdata/fleet/redis_data:/data
    networks:
      - Proxy

  fleetdm:
    restart: always
    container_name: Fleet
    image: fleetdm/fleet
    volumes:
      - /data/docker/appdata/fleet:/fleet
      - /data/docker/logs/fleet:/var/log/fleet
    command: sh -c "echo '\n' | /usr/bin/fleet prepare db && /usr/bin/fleet serve"
    environment:
      FLEET_MYSQL_ADDRESS: mysql:3306
      FLEET_MYSQL_DATABASE: fleet
      FLEET_MYSQL_USERNAME: app
      FLEET_MYSQL_PASSWORD: ********
      FLEET_REDIS_ADDRESS: redis:6379
      FLEET_REDIS_PASSWORD: *************
      FLEET_SERVER_CERT: /fleet/cert.pem
      FLEET_SERVER_KEY: /fleet/cert-key.pem
      FLEET_LOGGING_JSON: "true"
      FLEET_AUTH_JWT_KEY:
      FLEET_ACTIVITY_ENABLE_AUDIT_LOG: "true"
      FLEET_ACTIVITY_AUDIT_LOG_PLUGIN: filesystem
      FLEET_FILESYSTEM_AUDIT_LOG_FILE: /var/log/fleet/audit.log
      FLEET_OSQUERY_STATUS_LOG_PLUGIN: filesystem
      FLEET_FILESYSTEM_STATUS_LOG_FILE: /var/log/fleet/osqueryd.status.log
      FLEET_OSQUERY_RESULT_LOG_PLUGIN: filesystem
      FLEET_FILESYSTEM_RESULT_LOG_FILE: /var/log/fleet/osqueryd.results.log
    labels:
      - "traefik.enable=true"
      - "traefik.http.routers.fleetdm.rule=Host(`<http://it-asset.company.it|it-asset.company.it>`)"
      - "traefik.http.routers.fleetdm.entrypoints=websecure"
      - "traefik.http.services.fleetdm.loadbalancer.server.port=8080"
      - "traefik.http.routers.fleetdm.tls=true"
      - "traefik.http.routers.fleetdm.tls.passthrough=true"
    networks:
      - Proxy

networks:
  Proxy:
    external: true

Hi @Ibra. If your proxy is terminating TLS, you can turn off server TLS in Fleet.

And the client?

The client will only communicate over TLS