Every time the traefik package gets an update the permissions and owner on the file /etc/traefik/acme.json
get overwritten to something that traefik then complains about when trying to use the leresolver.
The error message in the traefik logs:
ERR The ACME resolve is skipped from the resolvers list error="unable to get ACME account: permissions 644 for /etc/traefik/acme.json are too open, please use 600" resolver=leresolver
The file should be owned by the traefik user+group and should have 600 permissions.
I guess one could just use a non-default storage location in ones custom config.
Which is maybe the better option anyway, because the file also gets its content overwritten, thus losing any previously stored certificates.
But from a package maintenance point maybe not overwriting this file if it exists already is better?