添加新的TLS HTTP入站listenrer后无法建立监听

[TaichiLi]

我添加了一下配置后

listeners:
  - name: http-proxy
    type: http
    port: 8080
    listen: 0.0.0.0
    proxy: AKY-JAPAN
    certificate: /etc/mihomo/certs/mihomo.crt
    private-key: /etc/mihomo/certs/mihomo.key

services:
  metacubexd:
    image: ghcr.io/metacubex/metacubexd-server:latest
    container_name: metacubexd
    restart: unless-stopped
    environment:
      CONTROL_TOKEN: '${CONTROL_TOKEN:?Set CONTROL_TOKEN in .env}'
      CLASH_SECRET: '${CLASH_SECRET:?Set CLASH_SECRET in .env}'
      GITHUB_TOKEN: '${GITHUB_TOKEN:-}'
      # Optional: pre-fill the connect form's backend address (#2155).
      DEFAULT_BACKEND_URL: '${DEFAULT_BACKEND_URL:-}'
      CONTROL_PORT: '18080'
      CLASH_API_PORT: '19090'
      MIXED_PORT: '25333'
      TZ: '${TZ:-UTC}'
    # ports:
    #   - '18080:18080' # dashboard UI + /api/control agent API
    #   - '19090:19090' # Mihomo external-controller API + WebSocket
    #   - '25333:25333' # mixed HTTP/SOCKS proxy port
    volumes:
      # Profiles, active config, kernel downloads, and caches must be writable.
      - 'metacubexd-data:/data'
      - ./certs:/etc/mihomo/certs:ro
    healthcheck:
      test: ['CMD', 'wget', '-qO-', 'http://127.0.0.1:18080/api/control/health']
      interval: 30s
      timeout: 5s
      start_period: 10s
      retries: 3

    # TUN is an advanced Linux-only override. It grants network-administration
    # capability and makes the container share the host network namespace.
    # Remove `ports:` (Docker ignores it in host-network mode), uncomment the
    # three settings below, and enable `tun:` in the active Mihomo profile.
    network_mode: host
    cap_add:
      - NET_ADMIN
    devices:
      - '/dev/net/tun:/dev/net/tun'

宿主机查不到8080的监听，我反复验证，自定义证书是正确的，并且也挂载到容器内了，我使用的是EC的私钥，请问监听无法建立是为什么，如何解决？而且只要删除 certificate: /etc/mihomo/certs/mihomo.crt 和 private-key: /etc/mihomo/certs/mihomo.key，监听就正常。