#Let's encrypt on a Self-Hosted nginx server

1 messages · Page 1 of 1 (latest)

gilded token
#

I am running a nginx server on a Self-Hosted server a friend lent to me. I cannot host an http server on port 80 to do the CertBot's http challenge to get the ssl record from let's encrypt. How would I get it to work on my nginx server?

#

I can provide more details as needed

gilded token
#

I get ```Requesting a certificate for john.tycho10101.is-a.dev

Certbot failed to authenticate some domains (authenticator: nginx). The Certificate Authority reported these problems:
Domain: john.tycho10101.is-a.dev
Type: connection
Detail: 135.135.8.64: Fetching http://john.tycho10101.is-a.dev/.well-known/acme-challenge/Jr4z2XHevxtILi_6O_uHvCC6nhpY14rF_Cau6zJPRbM: Timeout during connect (likely firewall problem)

Hint: The Certificate Authority failed to verify the temporary nginx configuration changes made by Certbot. Ensure the listed domains point to this nginx server and that it is accessible from the internet.```
when trying to do sudo certbot --nginx -d john.tycho10101.is-a.dev. There is no firewall.

green token
#

can you try hosting a regular file on a http server on port 80 and see if its reachable

#

you will have some ssl certificate issue since its a .dev tld so use curl to test it

gilded token
#

i cant host on port 80 annoyingly

green token
#

i see

#

then i think you might have to do a long lived dns challenge

gilded token
#

my server is a vm on his server he uses for his own personal things

green token
#

i see

#

do you have info on what the owner uses port 80 with

gilded token
#

actually i dont think he has anything there...

green token
#

then you can ask them to temporarily give you access

gilded token
#

yea

green token
#

if its a shared server then i recommend you guys use a shared reverse proxy on port 80 and 443, something like nginx configured to route your domain to your server and everything else, owner gets it

gilded token
#

wanted to see if there was a simple option before i have to wait till the weekend to ask him so our timezones match on the times we can be on

#

as well... im in hawaii, i am in school, he has work

green token
#

i see