My web server is (include version): Apache/2.4.59 (Unix)
The operating system my web server runs on is (include version): Gentoo Linux, profile: default/linux/amd64/23.0
I can login to a root shell on my machine (yes or no, or I don't know): yes
I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no
The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): certbot 2.10.0
Hey,
I'm setting up a server for my home, and I'm setting up Nextcloud on it. Nextcloud wants to run through an https connection, so I tought the easiest option is to setup an A record on CF for my domain and point it to the local IP. Is there any way to fix this error?
Use a DNS authenticator plugin to use the dns-01 challenge.
The apache authenticator (using --apache selects the apache plugin as authenticator as well as installer) can only do the http-01 challenge, logically. And of course that doesn't work with private IP addresses. Thus the only way is to use the dns-01 challenge.
Setting up certbot-dns-cloudflare shouldn't be too hard though. You can use my Gentoo overlay for the official Certbot DNS plugins so you can use emerge to simply install the plugin. It's added to the Gentoo list of overlays so you can simply use app-eselect/eselect-repository to add it. See the "Instructions" method in the overlay repository to find out more.
Please note that their ebuild is weird, depending on dev-python/zope-interface as well as dev-python/dns-lexicon, which is not applicable to the certbot-dns-cloudflare plugin.
While I understand the use of guru over a seemingly random users overlay (i.e., mine ) and their ebuild has some additions mine doesn't have, I can't say their ebuild is quite good.. Those useless dependencies are a real shame.
I'll see if I can make some suggestion to remove those deps, but I've never interacted with the guru overlay before. opened a bug report @ https://bugs.gentoo.org/936035.
@smoliicek They've fixed the erroneous dependencies on zope-interface and dns-lexicon. So if those dependencies were only required by the erroneous GURU ebuild, you probably want to update to =app-crypt/certbot-dns-cloudflare-2.10.0-r2 and depclean dev-python/zope-interface and dev-python/dns-lexicon.