Hello guys, I run into infamous nginx + ipv6 problem. On my server I run several virtual hosts on both ipv4 and ipv6. The ipv6 works as expected - but I cannot renew/obtain the certificate as soon as I set AAAA record on the domain, since certbot prefers ipv6.
This is my default_server catch-all host:
server
{
listen 80 default_server;
listen [::]:80 default_server;
server_name _;
include /etc/nginx/snippets/letsencrypt.conf;
}
server
{
listen 443 ssl http2 default_server;
listen [::]:443 ssl http2 default_server;
server_name _;
ssl_certificate /etc/letsencrypt/live/arodax.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/arodax.com/privkey.pem;
include /etc/nginx/snippets/letsencrypt.conf;
}
I have some other hots on my server some are ipv4 only but the other one listens on both:
server
{
listen 80;
listen [::]:80;
server_name upczone.cz www.upczone.cz;
include /etc/nginx/snippets/letsencrypt.conf;
return 301 https://www.upczone.cz$request_uri;
}
server
{
listen 443 ssl http2;
listen [::]:443 ssl http2;
server_name upczone.cz;
ssl_certificate /etc/letsencrypt/live/upczone.cz/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/upczone.cz/privkey.pem;
include /etc/nginx/snippets/letsencrypt.conf;
return 301 https://www.upczone.cz$request_uri;
}
Thee /etc/nginx/snippets/letsencrypt.conf file contains:
location ~ /.well-known/acme-challenge/ {
access_log /var/log/nginx/acme-challenge/access.log;
try_files $uri =404;
default_type “text/plain”;
root /var/www;
break;
}
This works perfectly when using host which run on ipv4 but as soon as I try to use ipv4+ipv6 host (the above one) i run into the problem. Can anyone help me?
My domain is: upczone.cz
I ran this command: certbot-auto certonly --webroot -w /var/www -d upczone.cz --dry-run
It produced this output:
Domain: upczone.cz
Type: connection
Detail: Fetching
http://upczone.cz/.well-known/acme-challenge/0LkncoOZqC79lXtSsLaOGXfrMxiYqgZcc_vpN4aGxCM:
Error getting validation data
My web server is (include version): nginx/1.14.2
