添加新服务后如何让Traefik自动生成SSL证书？

我通过Docker Compose运行Traefik作为反向代理及SSL端点。昨日在traefik-config/traefik-dynamic.yaml中新增了路由srv2和对应服务，新路由已正常工作（流量可正确转发至后端），说明Traefik已识别新配置，但对应的SSL证书尚未生成。我希望避免重启Traefik，当前ACME及Let's Encrypt配置如下：

certificatesResolvers:
  myresolver:
    acme:
      email: me@example.com
      storage: acme.json
      httpChallenge:
        entryPoint: web

新增后的traefik-config/traefik-dynamic.yaml精简版本：

http:
  routers:
    music:
      service: service-music
      rule: Host("music.example.com")
      tls:
        certresolver: myresolver
    rss:
      service: service-rss
      rule: Host("rss.example.com")
      tls:
        certresolver: myresolver
    srv2:
      service: service-srv2
      rule: Host("srv2.example.com")
      tls:
        certresolver: myresolver
    srv1:
      service: service-srv1
      rule: Host("srv1.example.com")
      tls:
        certresolver: myresolver
    srv3:
      service: service-srv3
      rule: Host("srv3.example.com")
      tls:
        certresolver: myresolver
  services:
    service-music:
      loadBalancer:
        servers:
          - url: http://music.home.example.com:4040
    service-rss:
      loadBalancer:
        servers:
          - url: http://home.example.com:8088
    service-srv1:
      loadBalancer:
        servers:
          - url: http://home.example.com:8123
    service-srv3:
      loadBalancer:
        servers:
          - url: http://home.example.com:3030
    service-srv2:
      loadBalancer:
        servers:
          - url: http://home.example.com:8082

是否需要执行某些操作来触发证书生成？

• 触发首次HTTPS请求：Traefik默认会在首次收到对应域名的HTTPS请求时，自动触发ACME证书申请。直接用浏览器访问https://srv2.example.com，或者用命令行发送请求：

  curl -v https://srv2.example.com
  

  这个请求会促使Traefik向Let's Encrypt发起证书申请流程。

• 检查日志确认状态：查看Traefik容器日志，确认证书申请是否成功或排查错误：

  docker-compose logs -f traefik
  

  日志中会包含ACME相关的信息，比如申请成功的提示，或者失败原因（如DNS解析失败、80端口未对外开放导致http挑战无法完成等）。

• 验证http挑战入口点：确保Traefik静态配置中web入口点（对应80端口）已正确暴露，且外部网络能访问该端口——Let's Encrypt需要通过80端口访问http://srv2.example.com/.well-known/acme-challenge/路径来完成域名验证。

• 手动触发（可选，需启用Traefik API）：如果自动触发无效，可通过Traefik API手动触发证书申请。首先确保静态配置中已启用API：

  api: {}
  entryPoints:
    web:
      address: ":80"
    websecure:
      address: ":443"
    traefik:
      address: ":8080" # API端口
  

  然后发送POST请求触发：

  curl -X POST http://<traefik-ip>:8080/api/http/routers/srv2/tls
  

内容的提问来源于stack exchange，提问作者GaryO