winlin
Goto Top

Nexcloud Setup Lets Encrypt stack file problem

Hallo Zusammen,

evtl kann jemand helfen. Ich habe auf meiner Raspberry Pi 4 mit raspbian bullseye OS Docker und Portainer installiert.
Dann habe ich folgendes Stackfile benutzt um mariadb, lets encrypt und next cloud einzurichten.
---
version: "2"  
services:
  nextcloud:
    image: linuxserver/nextcloud
    container_name: nextcloud
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Berlin
    volumes:
      - /media/NVMe_1TB/appdata/nextcloud/config:/config
      - /media/NVMe_1TB/appdata/nextcloud/data:/data
    depends_on:
      - mariadb
    restart: unless-stopped
  mariadb:
    image: linuxserver/mariadb
    container_name: mariadb
    environment:
      - PUID=1000
      - PGID=1000
      - MYSQL_ROOT_PASSWORD=nc29979
      - TZ=Europe/Berlin
    volumes:
      - /media/NVMe_1TB/appdata/mariadb:/config
    restart: unless-stopped
  letsencrypt:
    image: linuxserver/letsencrypt
    container_name: letsencrypt
    cap_add:
      - NET_ADMIN
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Europe/Berlin
      - URL=neno.ddns.net
      - SUBDOMAINS=wildcard
      - VALIDATION=noip
    volumes:
      - /media/NVMe_1TB/appdata/letsencrypt:/config
    ports:
      - 443:443
      - 82:80
    restart: unless-stopped

Das deployment war erfolgreich und alle container sind im running state. Aber wenn ich meine Domäne aufrufen will schlägt es fehl. Wenn Schmier die lets encrypt Logfiles anschaue im Portainer erhalte ich das hier:
[cont-init.d] 30-keygen: executing... 
using keys found in /config/keys
[cont-init.d] 30-keygen: exited 0.
[cont-init.d] 50-config: executing... 
Variables set:

0

0
TZ=Europe/Berlin
URL=neno.ddns.net
SUBDOMAINS=wildcard
EXTRA_DOMAINS=
ONLY_SUBDOMAINS=false
VALIDATION=noip
DNSPLUGIN=
EMAIL=
STAGING=

SUBDOMAINS entered, processing
Wildcard cert for myname.ddns.net will be requested
No e-mail address entered or address invalid
http validation is selected
Generating new certificate
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator standalone, Installer None
Requesting a certificate for *.myname.ddns.net and neno.ddns.net
Performing the following challenges:
Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA. You may need to use an authenticator plugin that can do challenges over DNS.
Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA. You may need to use an authenticator plugin that can do challenges over DNS.
ERROR: Cert does not exist! Please see the validation error above. The issue may be due to incorrect dns or port forwarding settings. Please fix your settings and recreate the container
[cont-finish.d] executing container finish scripts...
[cont-finish.d] done.
[s6-finish] waiting for services.
[s6-finish] sending all processes the TERM signal.
[s6-finish] sending all processes the KILL signal and exiting.
[s6-init] making user provided files available at /var/run/s6/etc...exited 0.
[s6-init] ensuring user provided files have correct perms...exited 0.
[fix-attrs.d] applying ownership & permissions fixes...
[fix-attrs.d] done.
[cont-init.d] executing container initialization scripts...
[cont-init.d] 01-envfile: executing... 
[cont-init.d] 01-envfile: exited 0.
[cont-init.d] 10-adduser: executing... 
usermod: no changes

-------------------------------------
          _         ()
         | |  ___   _    __
         | | / __| | |  /  \ 
         | | \__ \ | | | () |
         |_| |___/ |_|  \__/


Brought to you by linuxserver.io
-------------------------------------

To support the app dev(s) visit:
Certbot: https://supporters.eff.org/donate/support-work-on-certbot

To support LSIO projects visit:
https://www.linuxserver.io/donate/
-------------------------------------
GID/UID
-------------------------------------

User uid:    1000
User gid:    1000
-------------------------------------

[cont-init.d] 10-adduser: exited 0.
[cont-init.d] 20-config: executing... 
[cont-init.d] 20-config: exited 0.
[cont-init.d] 30-keygen: executing... 
using keys found in /config/keys
[cont-init.d] 30-keygen: exited 0.
[cont-init.d] 50-config: executing... 
Variables set:

0

0
TZ=Europe/Berlin
URL=neno.ddns.net
SUBDOMAINS=wildcard
EXTRA_DOMAINS=
ONLY_SUBDOMAINS=false
VALIDATION=noip
DNSPLUGIN=
EMAIL=
STAGING=

SUBDOMAINS entered, processing
Wildcard cert for neno.ddns.net will be requested
No e-mail address entered or address invalid
http validation is selected
Generating new certificate
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator standalone, Installer None
Requesting a certificate for *.neno.ddns.net and neno.ddns.net
Performing the following challenges:
Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA. You may need to use an authenticator plugin that can do challenges over DNS.
Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA. You may need to use an authenticator plugin that can do challenges over DNS.
ERROR: Cert does not exist! Please see the validation error above. The issue may be due to incorrect dns or port forwarding settings. Please fix your settings and recreate the container

wie kann Ich das fixen? Habe dieses tutorial genutzt und alles hat geklappt bis dann alles deployed war und ich auf next cloud zugreifen sollte.
Wie kann ich lets encrypt nun fixen=

Content-Key: 2989110252

Url: https://administrator.de/contentid/2989110252

Printed on: April 26, 2024 at 20:04 o'clock

Member: BirdyB
BirdyB Jun 05, 2022 at 05:06:48 (UTC)
Goto Top
Moin,
Wildcard-Zertifikate gibt es bei Lets Encrypt nur mit DNS-Validierung.
Also entweder DNS-Validierung einrichten oder das Zertifikat nur für die Subdomains ausstellen lassen, die du auch nutzt.
VG
Member: winlin
winlin Jun 05, 2022 at 07:07:47 (UTC)
Goto Top
Ok und da heißt nun? Kann ich DNS validierung einrichten? Was muss ich tun damit es geht?
Mitglied: 148523
148523 Jun 05, 2022 at 07:24:37 (UTC)
Goto Top
Member: winlin
winlin Jun 05, 2022 at 08:05:32 (UTC)
Goto Top
Ah okay also wenn ich alles manuell installiere auf der rpi dann so. Aber wenn ich das mit docker/docker-compose mache dafür bräuchte ich Hilfe. So wie hier:
https://goneuland.de/nextcloud-server-mit-docker-compose-und-traefik-ins ...

Und mit traefik:
https://goneuland.de/traefik-v2-reverse-proxy-fuer-docker-unter-debian-1 ...
Mitglied: 117471
117471 Jun 05, 2022 at 12:03:28 (UTC)
Goto Top
Hallo,

das hat mit Pi und Docker nichts zu tun.

Du hast den http Authenticator konfiguriert, der kann nur einzelne Adressen.

Für Wildcards musst Du den DNS Authenticator nutzen. Sprich: Der Authenticator liefert „irgendwo“ eine Information und Du trägst diese bei deinem Anbieter im DNS ein.

Gruß,
Jörg