Traefik + HASS reverse proxy, broken with no reason?

Configuration
1

I have been using Traefik and HASS for a few month now it always worked, but since yesterday it doesn’t. I only played around a bit with my dashboard. Not saying casper the ghost did it :stuck_out_tongue: just not sure how it happened.
(i have a bought owndomain.nl)
Traefik is installed on a SEPERATE debian VM. HASS is installed on Debian on a physical Asus Chromebox. Not a 100% sure which HASS version you call that (supervised?), but i installed Debian and than HASS simple by running linux install commands for the components (not sure how else to describe this :slight_smile: )

http://IP:8123 is working
https://hass.ad.myowndomain.nl doesnt work anymore

It shows me Connection refused.
I have already restore a week old backup. still no go.

Hass configuration.yml:

# Configure a default setup of Home Assistant (frontend, api, etc)
default_config:

http:
   use_x_forwarded_for: true
   trusted_proxies: 
     - 127.0.0.1 
     - 172.16.20.245 
     - 172.18.0.0/16
     - ::1
   ip_ban_enabled: true
   login_attempts_threshold: 30

telegram_bot:
  - platform: polling 
    api_key: 49833065028:BBEEe5EX3FY4Z8a0W8z17IVa1em_Ww5xuwa
    allowed_chat_ids: 1573074358

notify:
  - platform: telegram
    name: Telegram_bericht_nick
    chat_id: 1573074358

panel_custom:
      - name: Automations
        sidebar_title: Automations
        sidebar_icon: mdi:cog-transfer
        js_url: /api/hassio/app/entrypoint.js
        url_path: config/automation/dashboard
        embed_iframe: true
        require_admin: true
        config:
          ingress: core_configurator
      - name: Devices
        sidebar_title: Devices
        sidebar_icon: mdi:cog-transfer
        js_url: /api/hassio/app/entrypoint.js
        url_path: config/devices/dashboard
        embed_iframe: true
        require_admin: true
        config:
          ingress: core_configurator
      - name: Integration
        sidebar_title: Integrations
        sidebar_icon: mdi:cog-transfer
        js_url: /api/hassio/app/entrypoint.js
        url_path: config/integrations/dashboard
        embed_iframe: true
        require_admin: true
        config:
          ingress: core_configurator

# Text to speech
tts:
  - platform: google_translate

group: !include groups.yaml
automation: !include automations.yaml
script: !include scripts.yaml
scene: !include scenes.yaml

sensor:
  - platform: toon_smartmeter
    host: *.*.*.95
    port: 80
    scan_interval: 2
    resources:
      - elecusageflowpulse
      - elecusagecntpulse
      - elecusageflowlow
      - elecusagecntlow
      - elecusageflowhigh
      - elecusagecnthigh
      - elecprodflowlow
      - elecprodcntlow
      - elecprodflowhigh
      - elecprodcnthigh
      - elecsolar
      - elecsolarcnt
      - heat

-- Docker config.yml

http:
 #region routers
  routers:
    nextcloud:
      rule: "Host(`cloud.myowndomain.nl`)"
      middlewares:
        - nextcloud-redirectregex
      service: nextcloud
      tls: {}
    hass:
      entryPoints:
        - "https"
      rule: "Host(`hass.ad.myowndomain.nl`)"
      middlewares:
        - default-headers
        - https-redirectscheme
      tls: {}
      service: hass
    unifi:
      entryPoints:
        - "https"
      rule: "Host(`unifi.myowndomain.nl`)"
      middlewares:
        - default-headers
        - https-redirectscheme
      tls: {}
      service: unifi
    dsm:
      entryPoints:
        - "https"
      rule: "Host(`syno01.ad.myowndomain.nl`)"
      middlewares:
        - default-headers
        - https-redirectscheme
      tls: {}
      service: dsm
#endregion routers

#region services
  services:
    nextcloud:
      loadBalancer:
        servers:
          - url: "http://*.*.*.250"
        passHostHeader: true
    hass:
      loadBalancer:
        servers:
          - url: "http://*.*.*.230:8123"
        passHostHeader: true
#endregion services

#region middlewares
  middlewares:
    https-redirectscheme:
      redirectScheme:
        scheme: https
        permanent: true

# Nextcloud headers
    nextcloud-redirectregex:
      redirectRegex:
        permanent: true
        regex: 'https://(.*)/.well-known/(?:card|cal)dav'
        replacement: 'https://${1}/remote.php/dav'
    default-headers:
      headers:
        frameDeny: true
        sslRedirect: true
        browserXssFilter: true
        contentTypeNosniff: true
        forceSTSHeader: true
        stsIncludeSubdomains: true
        stsPreload: true
        stsSeconds: 15552000
        customFrameOptionsValue: SAMEORIGIN
        customRequestHeaders:
          X-Forwarded-Proto: https

    default-whitelist:
      ipWhiteList:
        sourceRange:
        - "10.0.0.0/8"
        - "192.168.0.0/16"
        - "172.16.0.0/12"
        - "10.4.1.1/24"
        - "172.16.16.0/24"

    secured:
      chain:
        middlewares:
        - default-whitelist
        - default-headers
#endregion middlewares

i apologize for the long startpost.
Any ideas?

P.S. i randomized some ID’s etc.