letsencrypt for docker

bbsen666 · 12. August 2019

Hi,

I have been told that let's encrypt plugin is no longer under maintenance and I should use letsencrypt in docker instead.
There are 2 versions in docker, jrcs/letsencrypt-nginx-proxy-companion and linuxserver/letsencrypt.

I believe that the former one has nginx reserve proxy included which I have no idea what is it, shall I just install the latter one if I just want simply secured connection for my omv？

thanks

Morlan · 12. August 2019

Use the latter. I think the community has the most experience with it and can help troubleshoot. It also has an included nginx reverse proxy.

aldrick · 12. August 2019

Hi,
You should use this one: linuxserver/letsencrypt.

For you omv having the SSL, you'll have to create a file omv.subdomain.conf as in this following thread.

cj2tech · 13. August 2019

whenever you use a docker container look at what is supported by the community of whatever application you are running. most of the time it will be self-named (ie. emby/embyserver) or linuxserver.

bbsen666 · 13. August 2019

Zitat von Morlan

Use the latter. I think the community has the most experience with it and can help troubleshoot. It also has an included nginx reverse proxy.

Zitat von aldrick

Hi,
You should use this one: linuxserver/letsencrypt.

For you omv having the SSL, you'll have to create a file omv.subdomain.conf as in this following thread.

Zitat von cj2tech

whenever you use a docker container look at what is supported by the community of whatever application you are running. most of the time it will be self-named (ie. emby/embyserver) or linuxserver.

thank you guys! i will give it a shot!

tinh_x7 · 8. Oktober 2019

Hi,

I used this video: https://www.youtube.com/watch?…I2SLMIbc4PM&index=56&t=0s as a guide to try to install LetsEncrypt with NoIp on Docker but no luck.

Note: Sensitive data has been changed.

I'm currently using Let's Encrypt plugin in OMV as well.
I notice in the video, TechnoDad port forwarded port 80>90, 443>450.
I don't want to change my current config like that.

Is there an alternative solution ?

HTML

http-01 challenge for site1.mydomain.com
http-01 challenge for site2.mydomain.com
http-01 challenge for site3.mydomain.com
Waiting for verification...
Challenge failed for domain site1.mydomain.com
Challenge failed for domain site2.mydomain.com
Challenge failed for domain site3.mydomain.com
http-01 challenge for site1.mydomain.com
http-01 challenge for site2.mydomain.com
http-01 challenge for site3.mydomain.com
Cleaning up challenges
Some challenges have failed.
IMPORTANT NOTES:
 - The following errors were reported by the site3:


   Domain: site1.mydomain.com
   Type:   unauthorized
   Detail: Invalid response from
   http://site1.mydomain.com/.well-known/acme-challenge/T0xc0td4-Ro0HSB9tDKvBnDwChbma9pxy8pwvDomd8U
   [69.1.2.3]: "<html>\r\n<head><title>404 Not
   Found</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>404
   Not Found</h1></center>\r\n<hr><center>"


   Domain: site2.mydomain.com
   Type:   unauthorized
   Detail: Invalid response from
   http://site2.mydomain.com/.well-known/acme-challenge/av2dnhMiYl3kP1GmEFTPtRUGLM83KEe59gJ6nsR-pOs
   [69.1.2.3]: "<html>\r\n<head><title>404 Not
   Found</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>404
   Not Found</h1></center>\r\n<hr><center>"


   Domain: site3.mydomain.com
   Type:   unauthorized
   Detail: Invalid response from
   http://site3.mydomain.com/.well-known/acme-challenge/fYYlvP_xOSYj2rdH23LB2HdR5u_ipdBb-_Ll34YB7D0
   [69.1.2.3]: "<html>\r\n<head><title>404 Not
   Found</title></head>\r\n<body bgcolor=\"white\">\r\n<center><h1>404
   Not Found</h1></center>\r\n<hr><center>"


   To fix these errors, please make sure that your domain name was
   entered correctly and the DNS A/AAAA record(s) for that domain
   contain(s) the right IP address.
ERROR: Cert does not exist! Please see the validation error above. The issue may be due to incorrect dns or port forwarding settings. Please fix your settings and recreate the container
^C

Alles anzeigen

Morlan · 8. Oktober 2019

For the http challenge to run successfully the certbot needs to access your letsencrypt container through ports 80/443 of your router.
What is your current config?

raulfg3 · 8. Oktober 2019

Zitat von tinh_x7

Hi,

I used this video: https://www.youtube.com/watch?…I2SLMIbc4PM&index=56&t=0s as a guide to try to install LetsEncrypt with NoIp on Docker but no luck.

Note: Sensitive data has been changed.

I'm currently using Let's Encrypt plugin in OMV as well.
I notice in the video, TechnoDad port forwarded port 80>90, 443>450.
I don't want to change my current config like that.

Is there an alternative solution ?

Alles anzeigen

port forwaded is to preserve actual port 80 & 443 of OMV webGUI, but if you do not want to do it, you need to change default port 80 & 443 in OMV WebGUI and configure letsencrypt to use port 80 & 443

tinh_x7 · 9. Oktober 2019

I've ported 80>90, and 443>450, but still no luck.

Code

E-mail address entered: test111@outlook.com




http validation is selected




Certificate exists; parameters unchanged; starting nginx




[cont-init.d] 50-config: exited 0.




[cont-init.d] 99-custom-files: executing... 




[custom-init] no custom files found exiting...




[cont-init.d] 99-custom-files: exited 0.




[cont-init.d] done.




[services.d] starting services




[services.d] done.




ifelse: fatal: unable to exec --cap-add=NET_ADMIN: No such file or directory




[cmd] --cap-add=NET_ADMIN exited 127




[cont-finish.d] executing container finish scripts...




[cont-finish.d] done.




[s6-finish] waiting for services.




[s6-finish] sending all processes the TERM signal.




[s6-finish] sending all processes the KILL signal and exiting.

Alles anzeigen

letsencrypt for docker

Jetzt mitmachen!

Tags