Internal Error when i tried to add proxy host

prokoro · July 17, 2021, 6:58pm

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:https://okorodesigneztees.com

I ran this command:Proxy Host

It produced this output:Internal Error

[7/17/2021] [5:39:23 AM] [7/17/2021] [5:39:27 AM] [7/17/2021] [5:39:27 AM] [7/17/2021] [5:39:29 AM] [Nginx [7/17/2021] [5:39:30 AM] [Nginx [7/17/2021] [5:39:30 AM] [SSL [7/17/2021] [6:39:22 AM] [SSL [7/17/2021] [6:39:23 AM] [Nginx [7/17/2021] [6:39:23 AM] [SSL [7/17/2021] [7:39:22 AM] [SSL [7/17/2021] [7:39:23 AM] [Nginx [7/17/2021] [7:39:23 AM] [SSL [7/17/2021] [8:39:22 AM] [SSL [7/17/2021] [8:39:23 AM] [Nginx [7/17/2021] [8:39:23 AM] [SSL [7/17/2021] [9:39:22 AM] [SSL [7/17/2021] [9:39:23 AM] [Nginx [7/17/2021] [9:39:23 AM] [SSL [7/17/2021] [10:39:22 AM] [SSL [7/17/2021] [10:39:23 AM] [Nginx [7/17/2021] [10:39:23 AM] [SSL [7/17/2021] [11:39:22 AM] [SSL [7/17/2021] [11:39:23 [7/17/2021] [11:39:23 [7/17/2021] [11:39:23 [7/17/2021] [11:39:23 AM] [Nginx [7/17/2021] [11:39:23 AM] [SSL [7/17/2021] [11:39:23 [7/17/2021] [11:39:23 AM] [Nginx [7/17/2021] [12:39:22 PM] [SSL [7/17/2021] [12:39:23 PM] [Nginx [7/17/2021] [12:39:23 PM] [SSL Connection Error: Error: [7/17/2021] [1:17:17 PM] [Nginx [7/17/2021] [1:17:17 PM] [SSL [7/17/2021] [1:17:30 PM] [Nginx [7/17/2021] [1:17:30 PM] [Express Saving debug log to /var/log/le Some challenges have failed.,
Ask for help or search ,
[7/17/2021] [1:19:04 PM] [Nginx [7/17/2021] [1:37:01 PM] [Nginx [7/17/2021] [1:38:45 PM] [Nginx [7/17/2021] [1:39:22 PM] [SSL [7/17/2021] [1:39:26 PM] [Nginx [7/17/2021] [1:39:26 PM] [SSL [7/17/2021] [1:40:06 PM] [Nginx [7/17/2021] [1:41:50 PM] [Nginx [7/17/2021] [1:47:22 PM] [Nginx [7/17/2021] [1:48:17 PM] [Nginx [7/17/2021] [2:37:48 PM] [Nginx [7/17/2021] [2:37:48 PM] [SSL [7/17/2021] [2:38:08 PM] [Nginx [7/17/2021] [2:38:08 PM] [Express Saving debug log to /var/log/le Some challenges have failed.,
Ask for help or search ,
[7/17/2021] [2:39:06 PM] [Nginx [7/17/2021] [2:39:22 PM] [SSL [7/17/2021] [2:39:23 PM] [Nginx [7/17/2021] [2:39:23 PM] [SSL [7/17/2021] [2:55:08 PM] [Nginx [7/17/2021] [3:39:22 PM] [SSL [7/17/2021] [3:39:23 PM] [Nginx [7/17/2021] [3:39:23 PM] [SSL [7/17/2021] [4:39:22 PM] [SSL [7/17/2021] [4:39:23 PM] [Nginx [7/17/2021] [4:39:23 PM] [SSL [7/17/2021] [5:39:22 PM] [SSL [7/17/2021] [5:39:23 PM] [7/17/2021] [5:39:23 PM] [7/17/2021] [5:39:25 PM] [7/17/2021] [5:39:25 PM] [7/17/2021] [5:39:27 PM] [Nginx [7/17/2021] [5:39:28 PM] [Nginx [7/17/2021] [5:39:28 PM] [SSL [7/17/2021] [5:59:31 PM] [Nginx [7/17/2021] [5:59:31 PM] [SSL [7/17/2021] [6:00:08 PM] [Nginx [7/17/2021] [6:00:08 PM] [Express Saving debug log to /var/log/le Some challenges have failed.,
Ask for help or search ,
[7/17/2021] [6:00:26 PM] [Nginx [7/17/2021] [6:03:39 PM] [Nginx [7/17/2021] [6:03:39 PM] [SSL [7/17/2021] [6:04:03 PM] [Nginx [7/17/2021] [6:04:03 PM] [Express Saving debug log to /var/log/le Some challenges have failed.,
Ask for help or search ,
[7/17/2021] [6:04:25 PM] [Nginx [7/17/2021] [6:05:14 PM] [Nginx [7/17/2021] [6:07:20 PM] [Nginx [7/17/2021] [6:08:53 PM] [Nginx [7/17/2021] [6:11:24 PM] [Nginx [IP Ranges] › info Fetching https://ip-ranges.amazonaws.com/ip-ranges.json,
[IP Ranges] › info Fetching https://www.cloudflare.com/ips-v4,
[IP Ranges] › info Fetching https://www.cloudflare.com/ips-v6,
] › info Reloading Nginx,
] › info Reloading Nginx,
] › info Renew Complete,
] › info Renewing SSL certs close to expiry...,
] › info Reloading Nginx,
] › info Renew Complete,
] › info Renewing SSL certs close to expiry...,
] › info Reloading Nginx,
] › info Renew Complete,
] › info Renewing SSL certs close to expiry...,
] › info Reloading Nginx,
] › info Renew Complete,
] › info Renewing SSL certs close to expiry...,
] › info Reloading Nginx,
] › info Renew Complete,
] › info Renewing SSL certs close to expiry...,
] › info Reloading Nginx,
] › info Renew Complete,
] › info Renewing SSL certs close to expiry...,
AM] [IP Ranges] › info Fetching IP Ranges from online services...,
AM] [IP Ranges] › info Fetching https://ip-ranges.amazonaws.com/ip-ranges.json,
AM] [IP Ranges] › info Fetching https://www.cloudflare.com/ips-v4,
] › info Reloading Nginx,
] › info Renew Complete,
AM] [IP Ranges] › info Fetching https://www.cloudflare.com/ips-v6,
] › info Reloading Nginx,
] › info Renewing SSL certs close to expiry...,
] › info Reloading Nginx,
] › info Renew Complete,
read ECONNRESET,
] › info Reloading Nginx,
] › info Requesting Let'sEncrypt certificates for Cert #12: okorodesigneztees.com,
] › info Reloading Nginx,
] › warning Command failed: certbot certonly --non-interactive --config "/etc/letsencrypt.ini" --cert-name "npm-12" --agree-tos --email "prokoro@hotmail.com" --preferred-challenges "dns,http" --domains "okorodesigneztees.com" ,
tsencrypt/letsencrypt.log,
for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.,
] › info Reloading Nginx,
] › info Reloading Nginx,
] › info Reloading Nginx,
] › info Renewing SSL certs close to expiry...,
] › info Reloading Nginx,
] › info Renew Complete,
] › info Reloading Nginx,
] › info Reloading Nginx,
] › info Reloading Nginx,
] › info Reloading Nginx,
] › info Reloading Nginx,
] › info Requesting Let'sEncrypt certificates for Cert #13: okorodesigneztees.com,
] › info Reloading Nginx,
] › warning Command failed: certbot certonly --non-interactive --config "/etc/letsencrypt.ini" --cert-name "npm-13" --agree-tos --email "prokoro@hotmail.com" --preferred-challenges "dns,http" --domains "okorodesigneztees.com" ,
tsencrypt/letsencrypt.log,
for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.,
] › info Reloading Nginx,
] › info Renewing SSL certs close to expiry...,
] › info Reloading Nginx,
] › info Renew Complete,
] › info Reloading Nginx,
] › info Renewing SSL certs close to expiry...,
] › info Reloading Nginx,
] › info Renew Complete,
] › info Renewing SSL certs close to expiry...,
] › info Reloading Nginx,
] › info Renew Complete,
] › info Renewing SSL certs close to expiry...,
[IP Ranges] › info Fetching IP Ranges from online services...,
[IP Ranges] › info Fetching https://ip-ranges.amazonaws.com/ip-ranges.json,
[IP Ranges] › info Fetching https://www.cloudflare.com/ips-v4,
[IP Ranges] › info Fetching https://www.cloudflare.com/ips-v6,
] › info Reloading Nginx,
] › info Reloading Nginx,
] › info Renew Complete,
] › info Reloading Nginx,
] › info Requesting Let'sEncrypt certificates for Cert #14: okorodesigneztees.com,
] › info Reloading Nginx,
] › warning Command failed: certbot certonly --non-interactive --config "/etc/letsencrypt.ini" --cert-name "npm-14" --agree-tos --email "prokoro@hotmail.com" --preferred-challenges "dns,http" --domains "okorodesigneztees.com" ,
tsencrypt/letsencrypt.log,
for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.,
] › info Reloading Nginx,
] › info Reloading Nginx,
] › info Requesting Let'sEncrypt certificates for Cert #15: okorodesigneztees.com,
] › info Reloading Nginx,
] › warning Command failed: certbot certonly --non-interactive --config "/etc/letsencrypt.ini" --cert-name "npm-15" --agree-tos --email "prokoro@hotmail.com" --preferred-challenges "dns,http" --domains "okorodesigneztees.com" ,
tsencrypt/letsencrypt.log,
for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.,
] › info Reloading Nginx,
] › info Reloading Nginx,
] › info Reloading Nginx,
] › info Reloading Nginx,
] › info Reloading Nginx

My web server is (include version):Ubuntu 20.04 portainer running on a Docker Container

The operating system my web server runs on is (include version):yes, Ubuntu 20.04

My hosting provider, if applicable, is: got my domain from pork-bun but i am hosting my own site on Ubuntu docker container with portainer, word-press and nginx setup.

I can login to a root shell on my machine (yes or no, or I don't know):yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): I have a cert through CloudFlare not sure how configure it

Also, do my DNS suppose to proxied on Cloudflare or on DNS only?

Please help I am very new to this is my first website.

Thank you

_az · July 17, 2021, 10:22pm

I think the first step here going to be: point your domain to Cloudflare.

Currently, your domain is configured to use Porkbun nameservers:

$ dig +noall +answer okorodesigneztees.com ns
okorodesigneztees.com.  86286   IN      NS      salvador.porkbun.com.
okorodesigneztees.com.  86286   IN      NS      maceio.porkbun.com.
okorodesigneztees.com.  86286   IN      NS      fortaleza.porkbun.com.
okorodesigneztees.com.  86286   IN      NS      curitiba.porkbun.com.

This means your domain is neither using Cloudflare DNS, nor your Ubuntu server.

When you initially added your domain to Cloudflare, it probably asked you to login to Porkbun and to change your domain's nameservers to a pair of Cloudflare-supplied ones.

You need to do this before proceeding any further.

prokoro · July 17, 2021, 11:06pm

Thank you, i recently went back in to change name-servers like yo suggested. Now I am receiving the error 522 connection time out message. And the Internal Error message.

griffin · July 17, 2021, 11:29pm

Welcome to the Let's Encrypt Community, Pamela

The links below should help.

You might want to consider using a Cloudflare Origin CA certificate instead of a Let's Encrypt certificate.

_az · July 17, 2021, 11:31pm

That's a good first step!

To get past this error, you might want to first change your Cloudflare SSL setting to "Flexible".

The relevant documentation is here: https://support.cloudflare.com/hc/en-us/articles/200170416-End-to-end-HTTPS-with-Cloudflare-Part-3-SSL-options

From there, you can decide to go the Let's Encrypt route like you were already planning to, or the Cloudflare Origin CA route like griffin is suggesting.

prokoro · July 17, 2021, 11:37pm

Ok, thank you both soo much....

griffin · July 17, 2021, 11:41pm

@_az

The 522 error is a timeout error, so I don't think the SSL validation will help much. I'm wondering if it might be due to the backend webserver not being configured correctly (or having a firewall).

_az · July 17, 2021, 11:54pm

Yeah maybe.

When I tried earlier, I got the 525 Origin SSL Handshake Error, so OP is probably changing things around.

Right now the issue seems to be that the origin A record in Cloudflare is pointing to the Porkbun domain parking page, rather than to the Ubuntu server.

griffin · July 18, 2021, 12:02am

Curious. Why would it timeout trying to load that parking page through Cloudfla... oh... is it redirecting to https THEN trying to pull the parking page via https!?

Update:

I'm seeing 404 errors now through Let's Debug (after the 301 redirect to https) in all four cases:

griffin · July 18, 2021, 12:10am

Yet a retry failed...

griffin · July 18, 2021, 12:12am

Now an IPv4 failed...

This shifting of failures seems a lot like there's something "adaptive" (like a firewall) in the way.

prokoro · July 18, 2021, 12:17am

Hello,
Changing my full mode to flexible worked. I am now on landing page. Now i need to have domain point to the word-press to build out my website. Nginx still not working I may have to leave that part along it keeps giving error message.

Thank you so much for all the help.

griffin · July 18, 2021, 12:19am

Ah...

so @_az was 100% correct then:

prokoro · July 18, 2021, 12:28am

Thank y'all soo..much!!

griffin · July 18, 2021, 12:30am

You are quite welcome.

griffin · July 18, 2021, 12:44am

You might find this to be important soon...

prokoro · July 18, 2021, 2:00am

Omg thank you thank you,

So much

system · August 17, 2021, 2:01am

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.