I have a sinology where I created the current certificates right before the shutdown of the deprecated method back in Feb. When I got those certs I had several web-proxies that passed the certificate setup, but now that the certs need to be renewed, they are failing.
Renewal for the certs fails with
# /usr/syno/sbin/syno-letsencrypt renew -c <ID1>
{"error":200,"file":"client.cpp","msg":"new_authz: unexpect httpcode."}
Main server conf
server {
server_name www.kreme.com;
listen 80;
listen 443;
location /.well-known {
proxy_pass https://wwww.kreme.com/.well-known;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
}
One of the names in the second cert
server {
server_name sonarr.kreme.com;
listen 80;
location /.well-known {
proxy_pass https://wwww.kreme.com/.well-known;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}
return 301 https://sonarr.kreme.com
;
}
(I actualy two different Ids to renew since there are too many for Synologies UI to accept, but they fail identically). I suspect there is something wrong in the main server conf file? I tried removing the listen 443; line, but no difference. I also tried simply moving the conf file for the main domain aside, but again, no difference.
