Certbot Renew did not work

deathmercenary · October 27, 2019, 5:53pm

/etc/nginx/snippets/snakeoil.conf:ssl_certificate_key /etc/ssl/private/ssl-cert-snakeoil.key;

rg305 · October 27, 2019, 5:54pm

Then you haven’t finished the configuration.
The cert is there [valid 82 more days].

deathmercenary · October 27, 2019, 5:55pm

wdym?
The whole thing is this:

    "web": {
        "host": "0.0.0.0",
        "listen": 8080,
        "ssl": {
            "enabled": true,
            "certificate": "/etc/letsencrypt/live/s1.prismforge.com/fullchain.pem",
            "key": "/etc/letsencrypt/live/s1.prismforge.com/privkey.pem"
        }
    },
    "docker": {
        "container": {
            "user": null
        },
        "network": {
            "name": "pterodactyl_nw"
        },
        "socket": "/var/run/docker.sock",
        "autoupdate_images": true
    },
    "filesystem": {
        "server_logs": "/tmp/pterodactyl"
    },
    "internals": {
        "disk_use_seconds": 30,
        "set_permissions_on_boot": true,
        "throttle": {
            "enabled": true,
            "kill_at_count": 5,
            "decay": 10,
            "lines": 1000,
            "check_interval_ms": 100
        }
    },
    "sftp": {
        "path": "/srv/daemon-data",
        "ip": "0.0.0.0",
        "port": 2022,
        "keypair": {
            "bits": 2048,
            "e": 65537
        }
    },
    "logger": {
        "path": "logs/",
        "src": false,
        "level": "info",
        "period": "1d",
        "count": 3
    },
    "remote": {
        "base": "http://admin2.prismforge.com"
    },
    "uploads": {
        "size_limit": 100
    },
    "keys": [
        "(Replaced this cause idk if secret or not lol)"
    ]
}

rg305 · October 27, 2019, 5:57pm

You can remove that.
Yes KEYS are always private! [don’t show ever]
I mean you haven’t finished the steps on the tutorial.

The cert is ready.
Now you just need to use it.
Or if all is configured… restart the system/container?

deathmercenary · October 27, 2019, 6:01pm

systemctl restart nginx ?

Cert was configured 8 days ago and working at the time. It randomly stopped today, because the previous cert was supposed to expire today.

And I tried to run systemctl restart nginx, and it gave me an error:

Job for nginx.service failed because the control process exited with error code.
See "systemctl status nginx.service" and "journalctl -xe" for details.

rg305 · October 27, 2019, 6:03pm

Please show:
nginx -t
and also:

deathmercenary · October 27, 2019, 6:03pm

● nginx.service - A high performance web server and a reverse proxy server
   Loaded: loaded (/lib/systemd/system/nginx.service; enabled; vendor preset: enabled)
   Active: failed (Result: exit-code) since Sun 2019-10-27 10:59:34 PDT; 3min 17s ago
     Docs: man:nginx(8)
  Process: 17407 ExecStop=/sbin/start-stop-daemon --quiet --stop --retry QUIT/5 --pidfile /run/nginx.pid (code=exited, status=0/SUCCESS)
  Process: 13992 ExecStart=/usr/sbin/nginx -g daemon on; master_process on; (code=exited, status=0/SUCCESS)
  Process: 17408 ExecStartPre=/usr/sbin/nginx -t -q -g daemon on; master_process on; (code=exited, status=1/FAILURE)
 Main PID: 13999 (code=exited, status=0/SUCCESS)

Oct 27 10:59:34 client-03-rs systemd[1]: Starting A high performance web server and a reverse proxy server...
Oct 27 10:59:34 client-03-rs nginx[17408]: nginx: [emerg] BIO_new_file("/etc/letsencrypt/live/<domain>/fullchain.pem") failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/etc/letsencrypt/live/<domain>/fullc
Oct 27 10:59:34 client-03-rs nginx[17408]: nginx: configuration file /etc/nginx/nginx.conf test failed
Oct 27 10:59:34 client-03-rs systemd[1]: nginx.service: Control process exited, code=exited status=1
Oct 27 10:59:34 client-03-rs systemd[1]: nginx.service: Failed with result 'exit-code'.
Oct 27 10:59:34 client-03-rs systemd[1]: Failed to start A high performance web server and a reverse proxy server.

root@client-03-rs:~# nginx -t
nginx: [emerg] BIO_new_file("/etc/letsencrypt/live/<domain>/fullchain.pem") failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/etc/letsencrypt/live/<domain>/fullchain.pem','r') error:2006D080:BIO routines:BIO_new_file:no such file)
nginx: configuration file /etc/nginx/nginx.conf test failed
root@client-03-rs:~#

rg305 · October 27, 2019, 6:05pm

Does it actually say "<domain>" or you changed it to that?

deathmercenary · October 27, 2019, 6:05pm

it says domain, let me fix it

deathmercenary · October 27, 2019, 6:06pm

it should be admin2.prismforge.com right? before I didn’t use SSL

rg305 · October 27, 2019, 6:07pm

I don’t see how we missed that file before…
Where is it located?
Please show that file (using ssl_certificate)

rg305 · October 27, 2019, 6:07pm

ls -l /etc/letsencrypt/live/

rg305 · October 27, 2019, 6:08pm

before what?
You're making changes and not saying anything about making them nor what you are changing.

deathmercenary · October 27, 2019, 6:10pm

-rw-r--r-- 1 root root 740 Jul 29 10:41 README
drwxr-xr-x 2 root root 4096 Oct 19 12:53 s1.prismforge.com

So s1.prismforge.com

This is the copy and paste format for it:
server_tokens off;

Replace all with admin2.prismforge.com? or s1.prismforge.com

    listen 80;
    server_name <domain>;
    return 301 https://$server_name$request_uri;
}

server {
    listen 443 ssl http2;
    server_name <domain>;

    root /var/www/pterodactyl/public;
    index index.php;

    access_log /var/log/nginx/pterodactyl.app-access.log;
    error_log  /var/log/nginx/pterodactyl.app-error.log error;

    # allow larger file uploads and longer script runtimes
    client_max_body_size 100m;
    client_body_timeout 120s;

    sendfile off;

    # SSL Configuration
    ssl_certificate /etc/letsencrypt/live/<domain>/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/<domain>/privkey.pem;
    ssl_session_cache shared:SSL:10m;
    ssl_protocols TLSv1.2;
    ssl_ciphers 'ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256';
    ssl_prefer_server_ciphers on;

    # See https://hstspreload.org/ before uncommenting the line below.
    # add_header Strict-Transport-Security "max-age=15768000; preload;";
    add_header X-Content-Type-Options nosniff;
    add_header X-XSS-Protection "1; mode=block";
    add_header X-Robots-Tag none;
    add_header Content-Security-Policy "frame-ancestors 'self'";
    add_header X-Frame-Options DENY;
    add_header Referrer-Policy same-origin;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }

    location ~ \.php$ {
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_pass unix:/run/php/php7.2-fpm.sock;
        fastcgi_index index.php;
        include fastcgi_params;
        fastcgi_param PHP_VALUE "upload_max_filesize = 100M \n post_max_size=100M";
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        fastcgi_param HTTP_PROXY "";
        fastcgi_intercept_errors off;
        fastcgi_buffer_size 16k;
        fastcgi_buffers 4 16k;
        fastcgi_connect_timeout 300;
        fastcgi_send_timeout 300;
        fastcgi_read_timeout 300;
        include /etc/nginx/fastcgi_params;
    }

    location ~ /\.ht {
        deny all;
    }
}

deathmercenary · October 27, 2019, 6:10pm

before I had it as this: with admin2.prismforge.com as the domain
sorry didn’t say I changed it

    listen 80;
    server_name <domain>;

    root /var/www/pterodactyl/public;
    index index.html index.htm index.php;
    charset utf-8;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }

    location = /favicon.ico { access_log off; log_not_found off; }
    location = /robots.txt  { access_log off; log_not_found off; }

    access_log off;
    error_log  /var/log/nginx/pterodactyl.app-error.log error;

    # allow larger file uploads and longer script runtimes
    client_max_body_size 100m;
    client_body_timeout 120s;

    sendfile off;

    location ~ \.php$ {
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_pass unix:/run/php/php7.2-fpm.sock;
        fastcgi_index index.php;
        include fastcgi_params;
        fastcgi_param PHP_VALUE "upload_max_filesize = 100M \n post_max_size=100M";
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        fastcgi_param HTTP_PROXY "";
        fastcgi_intercept_errors off;
        fastcgi_buffer_size 16k;
        fastcgi_buffers 4 16k;
        fastcgi_connect_timeout 300;
        fastcgi_send_timeout 300;
        fastcgi_read_timeout 300;
    }

    location ~ /\.ht {
        deny all;
    }
}

rg305 · October 27, 2019, 6:17pm

Which name will you be using at?:

deathmercenary · October 27, 2019, 6:19pm

Oh, and changing it fixed the error with
systemctl restart nginx

but the connection still isn’t working

for
root /var/www/pterodactyl/public;
I’m not sure because I don’t know what it means.

What I do know, is that admin2.prismforge.com is the url to login
And s1.prismforge.com is the node that my Minecraft server’s connect to

rg305 · October 27, 2019, 6:21pm

Then that is probably the "domain" in the file above.
As for the MC node, wasn't there some file referencing port 8080 or something like that?
Are there instructions for any other files to use the cert in?

deathmercenary · October 27, 2019, 6:27pm

For the config’s that I have to change, no. It’s only the copy and paste for
/srv/daemon/config/core.json

And the

/etc/nginx/sites-available/pterodactyl.conf

Both of which have already been sent.

(I can no longer reply to posts, so I have to edit the last one)

The 8080 is the /srv/daemon/config/core.json

    "web": {
        "host": "0.0.0.0",
        "listen": 8080,
        "ssl": {
            "enabled": true,
            "certificate": "/etc/letsencrypt/live/s1.prismforge.com/fullchain.pem",
            "key": "/etc/letsencrypt/live/s1.prismforge.com/privkey.pem"
        }
    },
    "docker": {
        "container": {
            "user": null
        },
        "network": {
            "name": "pterodactyl_nw"
        },
        "socket": "/var/run/docker.sock",
        "autoupdate_images": true
    },
    "filesystem": {
        "server_logs": "/tmp/pterodactyl"
    },
    "internals": {
        "disk_use_seconds": 30,
        "set_permissions_on_boot": true,
        "throttle": {
            "enabled": true,
            "kill_at_count": 5,
            "decay": 10,
            "lines": 1000,
            "check_interval_ms": 100
        }
    },
    "sftp": {
        "path": "/srv/daemon-data",
        "ip": "0.0.0.0",
        "port": 2022,
        "keypair": {
            "bits": 2048,
            "e": 65537
        }
    },
    "logger": {
        "path": "logs/",
        "src": false,
        "level": "info",
        "period": "1d",
        "count": 3
    },
    "remote": {
        "base": "http://admin2.prismforge.com"
    },
    "uploads": {
        "size_limit": 100
    },
    "keys": [
        "(Replaced this cause idk if secret or not lol)"
    ]
}

rg305 · October 27, 2019, 6:30pm

You can PM me directly or open another account and use that new account to continue posting here.
[click my icon and choose message]

Topic		Replies	Views
Certbot says cert is not ready for renewal Site says it's expired Help	7	1208	August 7, 2020
Cert Expired - Certbot Renewal Fails Help	11	1448	March 7, 2020
Certificate renew Help	6	515	May 12, 2023
Cert Renewal Fails Help	6	2757	November 29, 2021
Help renewing with certbot Help	16	967	July 24, 2019

Certbot Renew did not work

Related topics