Certificates Failing to renew but Nginx accessible

Help
1

Hi!

I am struggling with certbot and am in need of help. Log is attached to this post.

My domain is:
audiobook.squish.ie

I ran this command:
Nginx Proxy Manager - Renew cert
Tried deleting cert and requesting a new one

I run a dockerized NginxProxyManager on top of unraid. Am fairly familiar with linux etc.

I can access my external IP port 80 and 443 with no issues
cert_Renew_fail.txt (54.0 KB)
and arrive at the Nginx landing page. But Let's Debug produces a similar error to cert bot
https://letsdebug.net/audiobook.squish.ie/2573178

My systems here all check out - router ports forwarded, DNS entries correct etc.

This has all been working without a hitch since Dec 2022 and suddenly failed - not sure why.

Any help much appreciated!

Thanks

Mark

2

AFAICT, 212.159.75.183:80 does not seem to be globally reachable.

I tried connecting from three different networks in two different countries. It worked from one network (in Sweden) but not from the other two (also in Europe). You might want to check your firewall to see why it blocks some requests.

2 Likes
3

Ah! Yes I was getting millions of attempted connections from China, USA and other countries in Europe so locked it down to countries I travel to most.

Where in the world are the LetsEncrypt servers?

Great catch! Thanks so much!

2 Likes
4

We don’t know. You will have to assume they’re located anywhere in the world.

If you want to lock down port 80, another option is to use the DNS-01 challenge instead of HTTP-01.

2 Likes
5

right ok that makes sense too :slight_smile:
I will try now

2 Likes
6

That appears to have done the trick!

Thanks so much for your help!

3 Likes
7

You may want to read through this, which describes how and why Let's Encrypt validates from multiple locations around the world.

4 Likes
8

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.