Appwrite + DigitalOcean Setup | Appwrite | Page 1

craggy summit May 5, 2024, 9:58 AM

#

I recently create a droplet and I added appwrite to it, but now I want to access it with my appwrite.savoro-app.ro subdomain, because at the moment i can access it only with the ipv4 address.

Next I want to add a SSL certificate to it, but the big problem is that the docs are not simple to reproduce..

All I managed to do is to create a Domain in DigitalOcean which has 5 records (check the image).

#

Appwrite + DigitalOcean Setup

#

I also added these 2 records in cPanel, i don't know if it helps..

hoary valley May 5, 2024, 10:15 AM

#

craggy summit I recently create a droplet and I added appwrite to it, but now I want to access...

The SSL certificate is being generated automatically

hoary valley May 5, 2024, 10:15 AM

#

craggy summit I also added these 2 records in cPanel, i don't know if it helps..

You need to add A records pointing your Appwrite instance as you did

craggy summit May 5, 2024, 10:17 AM

#

I've also modified this lines

hoary valley May 5, 2024, 10:17 AM

#

Then after that you need to set the following this env variable with your domain:
_APP_DOMAIN

For functions domain, you need to set:
_APP_DOMAIN_FUNCTIONS

And also
_APP_DOMAIN_TARGET

hoary valley May 5, 2024, 10:18 AM

#

craggy summit I've also modified this lines

Did you run
docker compose up -d
?

craggy summit May 5, 2024, 10:18 AM

#

yes

#

#

But i still can access it through the ipv4, and when i try to access with my domain i get this

hoary valley May 5, 2024, 10:21 AM

#

craggy summit But i still can access it through the ipv4, and when i try to access with my dom...

You're using reverse proxy?

craggy summit May 5, 2024, 10:22 AM

#

I don't event know what's that :))

hoary valley May 5, 2024, 10:22 AM

#

I recommend not using IPV6 for your appwrite instance

hoary valley May 5, 2024, 10:22 AM

#

craggy summit I don't event know what's that :))

You're using Apache server?

craggy summit May 5, 2024, 10:22 AM

#

Yes, I think so

hoary valley May 5, 2024, 10:23 AM

#

craggy summit Yes, I think so

Could you describe what's your setup?

craggy summit May 5, 2024, 10:25 AM

#

I am using hostico.ro for my website savoro-app.ro, there is a wordpress website, then I have app.savoro-app.ro where I have my flutter app, then I want to add appwrite to appwrite.savoro-app.ro.

#

For all these things I use cPanel

#

I'm a beginner when it comes to server management

hoary valley May 5, 2024, 10:27 AM

#

craggy summit I am using hostico.ro for my website savoro-app.ro, there is a wordpress website...

Ok. The issue is the TLS certificate or that you can't reach the Appwrite instance?

craggy summit May 5, 2024, 10:28 AM

#

I can not reach the Appwrite instance using https://appwrite.savoro-app.ro/, only using this https://164.92.192.94/

hoary valley May 5, 2024, 10:29 AM

#

It works for me 🤔

#

You're on windows?

craggy summit May 5, 2024, 10:30 AM

#

Mac

#

but i'm using Chrome, not Safari

hoary valley May 5, 2024, 10:31 AM

#

It's probably DNS cache

craggy summit May 5, 2024, 10:31 AM

#

Also, if i try to access https://www.appwrite.savoro-app.ro/ (with www) I get this:

hoary valley May 5, 2024, 10:31 AM

#

Because I can reach it correctly

hoary valley May 5, 2024, 10:32 AM

#

craggy summit Also, if i try to access https://www.appwrite.savoro-app.ro/ (with www) I get th...

Your should not reach it with www as it's not a valid domain

craggy summit May 5, 2024, 10:32 AM

#

hmm..okey..

hoary valley May 5, 2024, 10:32 AM

#

You will need to flush DNS cache or wait a while until the cache expires

craggy summit May 5, 2024, 10:33 AM

#

So complicated 🤯

#

Can you show me what shows you when you access https://appwrite.savoro-app.ro/ ?

hoary valley May 5, 2024, 10:33 AM

#

#

I'm on the phone

#

Only TLS not loading properly

craggy summit May 5, 2024, 10:34 AM

#

Hmm.. yes.. it seems it works for you

hoary valley May 5, 2024, 10:34 AM

#

To solve that, try running this:
docker compose exec appwrite ssl domain="appwrite.savoro-app.ro"

craggy summit May 5, 2024, 10:35 AM

#

hoary valley May 5, 2024, 10:35 AM

#

Perfect

craggy summit May 5, 2024, 10:42 AM

#

I tried to flush DNS as you said using sudo killall -HUP mDNSResponder but I still can't see the appwrite instance..

hoary valley May 5, 2024, 10:44 AM

#

It could be that it's being cached in your ISP DNS. You will need to wait 24/48 hours or use a different DNS server such as https://one.one.one.one

craggy summit May 5, 2024, 10:46 AM

#

Okey..

#

So, I will make a recap to be sure I covered all:

In cPanel I should add 2 A Records pointing to droplet ipv4 address, one is appwrite.savoro-app.ro and www.appwrite.savoro-app.ro
In DigitalOcean I have to add a Domain savoro-app.ro where I have to add the same A Records as above
Then I have to change .env variables _APP_DOMAIN, _APP_DOMAIN_TARGET and _APP_DOMAIN_FUNCTIONS with my domain value appwrite.savoro-app.ro
Run docker compose up -d

And that's all?

hoary valley May 5, 2024, 10:52 AM

#

craggy summit So, I will make a recap to be sure I covered all: 1. In cPanel I should add 2 A...

You can delete the www one as it's not needed.
wdym? In DO you don't need to add anything from whay I understand as It's added directly inside the server and appwrite instance
Yes. App_domain_functions can/should be empty or if you want to use it I recommend using a different subdomain for ut
Yes

craggy summit May 5, 2024, 10:57 AM

#

And that link fowards me here https://docs.digitalocean.com/products/networking/dns/getting-started/quickstart/, that's why I thought I need to create a Domain on DigitalOcean

hoary valley May 5, 2024, 11:01 AM

#

craggy summit 2. And that link fowards me here https://docs.digitalocean.com/products/networki...

From what I understand you have done that in your CPanel

craggy summit May 5, 2024, 11:01 AM

#

Ah, so it's same thing

hoary valley May 5, 2024, 11:02 AM

#

From what I understand, yes

craggy summit May 5, 2024, 11:25 AM

#

Now it works 🎉

#

The only thing is that the certificate is not valid

#

hoary valley May 5, 2024, 11:28 AM

#

craggy summit Now it works 🎉

So what did you have done?

#

How did you have installed appwrite?

craggy summit May 5, 2024, 11:31 AM

#

I have no ideea, i didn't do anything different..

#

I just deleted that Domain from digital ocean

hoary valley May 5, 2024, 11:31 AM

#

Then probably cache expired

craggy summit May 5, 2024, 11:31 AM

#

And then i tried to run again those commands for .env

hoary valley May 5, 2024, 11:32 AM

#

Regarding the certificate issue, how did you have installed appwrite?

craggy summit May 5, 2024, 11:32 AM

#

Using the MarketPlace

#

from DigitalOcean

hoary valley May 5, 2024, 11:32 AM

#

Ok

craggy summit May 5, 2024, 11:32 AM

#

Does this help?

hoary valley May 5, 2024, 11:32 AM

#

The isntance conains some data or it's new?

craggy summit May 5, 2024, 11:33 AM

#

it's new

#

I didnt even created my account in it

hoary valley May 5, 2024, 11:34 AM

#

craggy summit Does this help?

Try restarting with this command:

docker compose down && docker compose up -d

Then after that run:
docker compose exec appwrite ssl domain="appwrite.savoro-app.ro"

craggy summit May 5, 2024, 11:34 AM

#

Sure, but firstly

#

I have to be inside appwrite folder?

hoary valley May 5, 2024, 11:35 AM

#

Yes

craggy summit May 5, 2024, 11:35 AM

#

ok

#

Done

#

Now it should happen instantly?

#

#

Also, if i run docker-compose logs

#

I still get that error Cannot renew domain (appwrite.savoro-app.ro) on attempt no. 7 certificate: Failed to issue a certificate with message: Saving debug log to /var/log/letsencrypt/letsencrypt.log

hoary valley May 5, 2024, 11:42 AM

#

craggy summit I still get that error `Cannot renew domain (appwrite.savoro-app.ro) on attempt ...

What error do you get in the indicated file?

craggy summit May 5, 2024, 11:45 AM

#

I do not even know where it's that file cause i do not find it

#

faint lily May 5, 2024, 1:23 PM

#

craggy summit I still get that error `Cannot renew domain (appwrite.savoro-app.ro) on attempt ...

For this to work, port 80 must be open and route to Appwrite. I don't see Appwrite when I browse to http://appwrite.savoro-app.ro/

#

See https://appwrite.io/docs/advanced/self-hosting/tls-certificates

craggy summit May 6, 2024, 7:57 AM

#

Okay, I will try to figure it out how to do it

craggy summit May 6, 2024, 11:16 AM

#

I do not understand why there's no proper docs for this..

#

And as I see appwrite uses port 80

#

@faint lily

#

Also, I should install NGINX and Certbot for this?

faint lily May 6, 2024, 2:37 PM

#

craggy summit Also, I should install NGINX and Certbot for this?

No, Appwrite can generate your certificate

craggy summit May 7, 2024, 10:21 AM

#

...

#

Still not working..

#

I think i will start a new thread with my problem.. maybe someone can help me

hoary valley May 7, 2024, 11:58 AM

#

craggy summit I think i will start a new thread with my problem.. maybe someone can help me

What error do you get?

hoary valley May 7, 2024, 12:50 PM

#

craggy summit And as I see appwrite uses port 80

On DigitalOcean there's a firewall

#

Make sure you have the port 80 allowed

craggy summit May 8, 2024, 7:25 AM

#

Yes.. it's allowed

craggy summit May 8, 2024, 7:28 AM

#

hoary valley What error do you get?

This one

#

And this is inside /var/log/letsencrypt/letsencrypt.log

hoary valley May 8, 2024, 7:46 AM

#

craggy summit Yes.. it's allowed

That's not the DO firewall I think

craggy summit May 8, 2024, 8:16 AM

#

https://www.digitalocean.com/community/questions/how-to-open-port-for-specific-ip-droplet-with-vpn

How to open port for specific IP (Droplet with VPN) | DigitalOcean

I have a Wireguard VPN on my droplet and want to open ports for my email server which is connected via VPN. As i have seen the firewall only supports opening…

#

Also on their website in ubuntu section https://www.digitalocean.com/community/tutorials/opening-a-port-on-linux

How To Open a Port on Linux | DigitalOcean

Technical tutorials, Q&A, events — This is an inclusive place where developers can find or lend support and discover new ways to contribute to the community.

#

They use sudo ufw allow 80

hoary valley May 8, 2024, 9:11 AM

#

@craggy summit
https://docs.digitalocean.com/products/networking/firewalls/getting-started/quickstart/