hi all, I'm sure I did something wrong (I know I should update my cert daily.. I got crons working few weeks ago, so yeah!) but I can't get my cert to renew.. and.. it hurts seeing my nextcloud isntance isn't secure :P.
If it's in your home, port forwarding on port 80 isn't working.
If you don't want your webserver to listen on port 80, you can use --standalone instead of --apache while using --pre-hook and --post-hook to open and close your firewall and --deploy-hook to reload apache.
But you should really listen on port 80 to redirect http to https and keep using --apache
I don't see a ServerName in the 443 VirtualHost, just copy it from the port 80 one and replace ServerAlias www.victoroos.nl, as *. includes www. (but you should not use *. on 443 if you don't have a wildcard certificate, just use ServerName victoroos.nl and ServerAlias www.victoroos.nl on both -- redirect one on the other)
Some firewall is interfering. I can get to your https but not to your http.
peppe@monolite:~$ curl -Ik https://victoroos.nl
HTTP/1.1 200 OK
Date: Wed, 02 Feb 2022 10:34:24 GMT
Server: Apache/2.4.41 (Ubuntu)
Strict-Transport-Security: max-age=15552000; includeSubDomains
Link: <https://victoroos.nl/index.php/wp-json/>; rel="https://api.w.org/"
Content-Type: text/html; charset=UTF-8
peppe@monolite:~$ curl -Ik http://victoroos.nl
curl: (7) Failed to connect to victoroos.nl port 80: Connection refused
This is wordpress, did you say it was nextcloud? Is your A record pointing to the right IP address? (make sure your AAAA record points to the same machine if you have one set up.)
It is a wordpress site, with a special alias for a nextcloud instance.
Okey, my router didn't accept 80 port anymore, that fixed that rpoblem. Hwoever,
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Which names would you like to activate HTTPS for?
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: victoroos.nl
2: www.victoroos.nl
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate numbers separated by commas and/or spaces, or leave input
blank to select all options shown (Enter 'c' to cancel): 2
Requesting a certificate for www.victoroos.nl
Successfully received certificate.
Certificate is saved at: /etc/letsencrypt/live/www.victoroos.nl/fullchain.pem
Key is saved at: /etc/letsencrypt/live/www.victoroos.nl/privkey.pem
This certificate expires on 2022-05-03.
These files will be updated when the certificate renews.
Certbot has set up a scheduled task to automatically renew this certificate in the background.
Deploying certificate
Successfully deployed certificate for www.victoroos.nl to /etc/apache2/sites-enabled/vicsfileshare-le-ssl.conf
Failed redirect for www.victoroos.nl
Unable to set the redirect enhancement for www.victoroos.nl.
NEXT STEPS:
- The certificate was saved, but could not be installed (installer: apache). After fixing the error shown below, try installing it again by running:
certbot install --cert-name www.victoroos.nl
Unable to find corresponding HTTP vhost; Unable to create one as intended addresses conflict; Current configuration does not support automated redirection
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
Please specify one or more enhancement types to configure. To list the available enhancement types, run:
certbot --help enhance
No enhancements requested, exiting.
