I got /.well-known/acme-challenge does not exist or is not a directory

Help
21

and this is my scrip

#!/bin/bash

if ! [ -x "$(command -v docker-compose)" ]; then
    echo 'Error: docker-compose is not installed.' >&2
      exit 1
    fi

    domains=(portal.comp-moto.com)
    rsa_key_size=4096
    data_path="./data/certbot"
    email="khamonluck.ang@gmail.com" # Adding a valid address is strongly recommended
    staging=0 # Set to 1 if you're testing your setup to avoid hitting request limits

    if [ -d "$data_path" ]; then
        read -p "Existing data found for $domains. Continue and replace existing certificate? (y/N) " decision
          if [ "$decision" != "Y" ] && [ "$decision" != "y" ]; then
          exit
            fi
          fi


          if [ ! -e "$data_path/conf/options-ssl-nginx.conf" ] || [ ! -e "$data_path/conf/ssl-dhparams.pem" ]; then
              echo "### Downloading recommended TLS parameters ..."
          mkdir -p "$data_path/conf"
            curl -s https://raw.githubusercontent.com/certbot/certbot/master/certbot-nginx/certbot_nginx/_internal/tls_configs/options-ssl-nginx.conf > "$data_path/conf/options-ssl-nginx.conf"
              curl -s https://raw.githubusercontent.com/certbot/certbot/master/certbot/certbot/ssl-dhparams.pem > "$data_path/conf/ssl-dhparams.pem"
                echo
        fi

        echo "### Creating dummy certificate for $domains ..."
        path="/etc/letsencrypt/live/$domains"
        mkdir -p "$data_path/conf/live/$domains"
      docker-compose run --rm --entrypoint "\
          openssl req -x509 -nodes -newkey rsa:1024 -days 1\
              -keyout '$path/privkey.pem' \
                  -out '$path/fullchain.pem' \
                -subj '/CN=localhost'" certbot
      echo


      echo "### Starting nginx ..."
    docker-compose up --force-recreate -d nginx
    echo

    echo "### Deleting dummy certificate for $domains ..."
  docker-compose run --rm --entrypoint "\
      rm -Rf /etc/letsencrypt/live/$domains && \
        rm -Rf /etc/letsencrypt/archive/$domains && \
          rm -Rf /etc/letsencrypt/renewal/$domains.conf" certbot
  echo


  echo "### Requesting Let's Encrypt certificate for $domains ..."
  #Join $domains to -d args
domain_args=""
for domain in "${domains[@]}"; do
    domain_args="$domain_args -d $domain"
  done

  # Select appropriate email arg
  case "$email" in
      "") email_arg="--register-unsafely-without-email" ;;
        *) email_arg="--email $email" ;;
      esac

      # Enable staging mode if needed
      if [ $staging != "0" ]; then staging_arg="--staging"; fi

      docker-compose run --rm --entrypoint "\
          certbot certonly --webroot -w /var/www/certbot \
        $staging_arg \
            $email_arg \
          $domain_args \
              --rsa-key-size $rsa_key_size \
            --agree-tos \
                --dry-run" certbot
      echo

      echo "### Reloading nginx ..."
      docker-compose exec nginx nginx -s reload
22

Can you help me? TT
now I can run all above and docker is up already but I got this when I go to url

Your connection is not private
Attackers might be trying to steal your information from portal.comp-moto.com (for example, passwords, messages, or credit cards). Learn more
NET::ERR_CERT_AUTHORITY_INVALID
23

Shouldn't nginx already be running?

1 Like
24

I was wrong, now I can fix it, my domain was point to the wrong ip. Thank you :slight_smile:

3 Likes
25

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.