Traefik + HA 500 Internal Server Error

Configuration
1

Hello everyone.
I am completely out of ideas and at my wits end with this. I know it has to be some stupidly simple config option that I am not finding, but I am sure that I have tried everything to get this working.
I am currently running HA 2025.2.5 on proxmox virtual environment and I can access it just fine if I use the machines IP to connect. I am trying to add my existing traefik installation, which resides on another server as a docker container, to reverse proxy the connection. I know that the connection between proxmox and traefik is fine because I have traefik handling an internal reverse proxy, mainly for testing. When I attempt to connect to the hostname of my HA instance, I get Internal Server Error and on the browser console, it shows a code of 500. I have x_forwarded_for set to true and have set my server as trusted_ip in configuration.yaml. Also, I know that SSL seems to be working since when I attempt to connect to the FQDN of HA, it shows a secure connection and I can view the certificate, which is correct. Can someone please have a look at my configuration and hopefully point me in some direction to figuring this out. Documentation seems to be non-existant and the 6+ hours of continuous changing configs and google searches has come up with nothing.
Traefik v. 3.3.4 running on docker host.

dyn-config.yaml

http:
  routers:
    hass-io:
      entryPoints:
        - https
      service: hass-io
      rule: Host(`my FQDN`)
      tls:
        certResolver: letsencrypt
      observability:
        accessLogs: true
        tracing: true
        metrics: true
  services:
    hass-io:
      loadBalancer:
        servers:
          - url: https://172.25.20.41:8123

configuration.yaml

# Loads default set of integrations. Do not remove.
default_config:

# Load frontend themes from the themes folder
frontend:
  themes: !include_dir_merge_named themes

automation: !include_dir_list automations/
script: !include_dir_list scripts/
scene: !include_dir_list scenes/
homeassistant:
  name: Home
  latitude: redacted
  longitude: redacted
  unit_system: us_customary
  currency: USD
  country: US
  time_zone: "America/Chicago"

http:
  ip_ban_enabled: true
  login_attempts_threshold: 5
  use_x_forwarded_for: true
  trusted_proxies:
    - 172.25.10.17

So, just a break down. My ingress server resides on a separate subnet with rules allowing access from the server to my proxmox server. I know that this connection works because I can connect to proxmox using the FQDN with a local dns pointing said FQDN to my ingress server. I believe I am getting access from my server to home assistant because I do see 500 status logs in my traefik access logs (will share with someone if necessary, just dont want to take the time to redact logs of information). I did have a few logs in HA about attempts to connect coming from reverse proxy were not configured properly and those have since ceased since I added the http section to home assistant configuration.yaml. So, now I am all out of ideas. I have even tried shutting down the traefik container and having it pull 3.2.3 as that version was mentioned in a recent forum post, but again, it does not help. Anyone else ever get this set up and running that would be willing to share your relevant configs? Thank you in advance!

2

Well, I called it on it being some stupidly simple configuration error causing me a whole evening of headaches. After using chatgpt (i know, i know) and doing basic troubleshooting steps, it suggested changing the service url request from https to http and, lo and behold, it works and it is still using the ssl certificate assigned by traffic. So, for anyone who is having the same problems and desperately searching for a solution, here is the relevant snippet of my dynamic configuration for traefik to point to a home assistant instance on another server.

http:
  routers:
    #Choose name for your service router.
    hass-io:
      entryPoints:
        #Name of your https entryPoint.
        - https
      #Choose name for the service. Will reference under services key.
      service: hass-io
      #Replace FQDN with your domain name using tildas, not single quotes.
      rule: Host(`FQDN`)
      tls:
        #Name of your certifcate resolver.
        certResolver: letsencrypt

  services:
    #Use name of service declared under router.
    hass-io:
      loadBalancer:
        servers:
          #Insert IP address of HomeAssistant server, using HTTP instead of HTTPS.
          - url: http://ip.of.ha.server:8123

Hope this can possibly help someone else and save possible hours of angst and frustration!