EdgarWallace

Thank you very much @aptalca adding a comma into the subdomain(s) field is working well (adding a blank isn't working btw. this is what I tried earlier..) @allanp81 you might want to try that as well. Let me know if it is working for you too.

Hi, I am having an issue with my Letsencrypt Docker whenever I am updating it. The log is showing: LOG After each update I have to remove the Subdomain(s) but I am sure that there is a smarter way to deal with this. Anyone able to help? Thanks a lot.

I tried the method mentioned above but without any success.

Sure, Sure, I double checked and am also using the nextcloud.server.com method. Not fixed yet but I will try to tomorrow and reporting back if you think that is making sense.

I am running it as https://server.com/nextcloud which is your preferred setup - right? I just discovered that there are some entries in /mnt/user/system/docker/appdata/nextcloud/nginx/site-confs/default which need some change: rewrite ^/.well-known/carddav /remote.php/dav/ permanent; rewrite ^/.well-known/caldav /remote.php/dav/ permanent; Should is rather look like: rewrite ^/.well-known/caldav /nextcloud/remote.php/dav/ permanent; rewrite ^/.well-known/carddav /nextcloud/remote.php/dav/ permanent;

Thanks @CHBMB as always. Do you have any great idea how to fix my issue? I can Imagine that I‘m not the only one....

I am having a sync issue on macOS which was also discussed here: Nextcloud: Calendar and Contacts with MacOS and iOS (iOS sync is working very well). Seems that there is something needed in macOS: Troubleshooting Contacts & Calendar The document is telling us that the .htaccess file has to be edited within the following lines to be added: Redirect301/.well-known/carddav/nextcloud/remote.php/Redirect301/.well-known/caldav/nextcloud/remote.php/dav Which file do I have to choose as there are 2 of them: /mnt/user/system/docker/appdata/nextcloud/www/nextcloud/.htaccess /mnt/user/system/docker/appdata/nextcloud/www/nextcloud/config/.htaccess Thanks for help.

Update via WebUI went well. Running Nextcloud 13 now :-)

Yes it was - I was not aware it's simply "allowed" to modify the unRAID's webui Port 443. I just changed it towards 442 and all is working again. I do believe that some will fall into that trap as well as soon as they are updating. Maybe @aptalca you could add this to your great guide? Thanks @aptalca and @CHBMB

@CHBMB that means it‘s working for you under 6.4? I have altered my post and it shows that there is an issue with port 443 already assigned. Gesendet von iPad mit Tapatalk

This was working for unRAID 6.3.5 but it stopped working for 6.4. Anyone Else whole made that experience? Latest letsencrypt Docker is installed: root@localhost:# /usr/local/emhttp/plugins/dynamix.docker.manager/scripts/docker run -d --name="letsencrypt" --net="bridge" --privileged="true" -e TZ="Europe/Berlin" -e HOST_OS="unRAID" -e "EMAIL"="[email protected]" -e "URL"="mydomain.org" -e "ONLY_SUBDOMAINS"="false" -e "DHLEVEL"="4096" -e "PUID"="99" -e "PGID"="100" -e "HTTPVAL"="true" -p 85:80/tcp -p 443:443/tcp -v "/mnt/user/system/docker/appdata/letsencrypt":"/config":rw linuxserver/letsencrypt68820e55413df4f6d12189d079334a943a01c4699136e38059fc459597f8670b/usr/bin/docker: Error response from daemon: driver failed programming external connectivity on endpoint letsencrypt (296916628be7ee045bd094ac8ebaa72631a8bd1146130c8480a19b91462dd0d4): Error starting userland proxy: listen tcp 0.0.0.0:443: bind: address already in use. Gesendet von iPad mit Tapatalk

The was doing the trick: port forward http (tcp 80 -->> 85) as well as https (tcp 443 -->> 443) is required. Thanks a lot.

I applied the fix...still not working: ------------------------------------- _ _ _ | |___| (_) ___ | / __| | |/ _ \ | \__ \ | | (_) | |_|___/ |_|\___/ |_| Brought to you by linuxserver.io We gratefully accept donations at: https://www.linuxserver.io/donations/ ------------------------------------- GID/UID ------------------------------------- User uid: 99 User gid: 100 ------------------------------------- [cont-init.d] 10-adduser: exited 0. [cont-init.d] 20-config: executing... [cont-init.d] 20-config: exited 0. [cont-init.d] 30-keygen: executing... using keys found in /config/keys [cont-init.d] 30-keygen: exited 0. [cont-init.d] 50-config: executing... 4096 bit DH parameters present No subdomains defined E-mail address entered: [email protected] Different sub/domains entered than what was used before. Revoking and deleting existing certificate, and an updated one will be created usage: certbot [SUBCOMMAND] [options] [-d DOMAIN] [-d DOMAIN] ... Certbot can obtain and install HTTPS/TLS/SSL certificates. By default, it will attempt to use a webserver both for obtaining and installing the certificate. certbot: error: argument --cert-path: No such file or directory Generating new certificate Saving debug log to /var/log/letsencrypt/letsencrypt.log Plugins selected: Authenticator standalone, Installer None Obtaining a new certificate Performing the following challenges: http-01 challenge for xxxxxxxx.xxxxxx.org Waiting for verification... Cleaning up challenges Failed authorization procedure. xxxxxxxx.xxxxxx.org (http-01): urn:acme:error:connection :: The server could not connect to the client to verify the domain :: Fetching http://xxxxxxxx.xxxxxx.org/.well-known/acme-challenge/igQwFM5uEZH-G1E1iS-R0v-GlcC3-xv-g9F1n-9r51g: Timeout IMPORTANT NOTES: - The following errors were reported by the server: Domain: xxxxxxxx.xxxxxx.org Type: connection Detail: Fetching http://xxxxxxxx.xxxxxx.org/.well-known/acme-challenge/igQwFM5uEZH-G1E1iS-R0v-GlcC3-xv-g9F1n-9r51g: Timeout To fix these errors, please make sure that your domain name was entered correctly and the DNS A/AAAA record(s) for that domain contain(s) the right IP address. Additionally, please check that your computer has a publicly routable IP address and that no firewalls are preventing the server from communicating with the client. If you're using the webroot plugin, you should also verify that you are serving files from the webroot path you provided. - Your account credentials have been saved in your Certbot configuration directory at /etc/letsencrypt. You should make a secure backup of this folder now. This configuration directory will also contain certificates and private keys obtained by Certbot so making regular backups of this folder is ideal. /var/run/s6/etc/cont-init.d/50-config: line 134: cd: /config/keys/letsencrypt: No such file or directory [cont-init.d] 50-config: exited 1. [cont-finish.d] executing container finish scripts... [cont-finish.d] done. [s6-finish] syncing disks. [s6-finish] sending all processes the TERM signal. [s6-finish] sending all processes the TERM signal. [s6-finish] sending all processes the KILL signal and exiting.

Same here....everything was running fine until the todays container update: ------------------------------------- _ _ _ | |___| (_) ___ | / __| | |/ _ \ | \__ \ | | (_) | |_|___/ |_|\___/ |_| Brought to you by linuxserver.io We gratefully accept donations at: https://www.linuxserver.io/donations/ ------------------------------------- GID/UID ------------------------------------- User uid: 99 User gid: 100 ------------------------------------- [cont-init.d] 10-adduser: exited 0. [cont-init.d] 20-config: executing... [cont-init.d] 20-config: exited 0. [cont-init.d] 30-keygen: executing... using keys found in /config/keys [cont-init.d] 30-keygen: exited 0. [cont-init.d] 50-config: executing... 4096 bit DH parameters present No subdomains defined E-mail address entered: [email protected] Generating new certificate Saving debug log to /var/log/letsencrypt/letsencrypt.log Plugins selected: Authenticator standalone, Installer None Obtaining a new certificate Performing the following challenges: Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA. Client with the currently selected authenticator does not support any combination of challenges that will satisfy the CA. /var/run/s6/etc/cont-init.d/50-config: line 134: cd: /config/keys/letsencrypt: No such file or directory [cont-init.d] 50-config: exited 1. [cont-finish.d] executing container finish scripts... [cont-finish.d] done. [s6-finish] syncing disks. [s6-finish] sending all processes the TERM signal. [s6-finish] sending all processes the KILL signal and exiting.

Hi Squid, this is a great thread. Thanks for all your hard work. I have read through and implemented a Minimserver Docker that I found at Dockerhub: https://hub.docker.com/r/tromatik/docker-minimserver/ My /boot/config/plugins/dockerMan/templates-user/my-minimserver.xml looks like so: <?xml version="1.0"?> <Container version="2"> <Name>minimserver</Name> <Repository>tromatik/docker-minimserver</Repository> <Registry>https://hub.docker.com/r/tromatik/docker-minimserver/~/dockerfile/</Registry> <Network>host</Network> <Privileged>false</Privileged> <Support>https://hub.docker.com/r/tromatik/docker-minimserver/</Support> <Overview>MinimServer is a new UPnP AV music server with a number of innovative features...</Overview> <Category>Media Servers:</Category> <WebUI/> <TemplateURL/> <Icon/> <ExtraParams/> <DateInstalled>1506328130</DateInstalled> <Description>MinimServer is a new UPnP AV music server with a number of innovative features...</Description> <Networking> <Mode>host</Mode> <Publish> <Port> <HostPort>9790</HostPort> <ContainerPort>9790</ContainerPort> <Protocol>tcp</Protocol> </Port> <Port> <HostPort>9791</HostPort> <ContainerPort>9791</ContainerPort> <Protocol>tcp</Protocol> </Port> </Publish> </Networking> <Data> <Volume> <HostDir>/mnt/user/iTunes/Music/</HostDir> <ContainerDir>/media</ContainerDir> <Mode>ro</Mode> </Volume> </Data> <Environment/> <Config Name="Host Port 1" Target="9790" Default="9790" Mode="tcp" Description="Container Port: 9790" Type="Port" Display="always" Required="true" Mask="false">9790</Config> <Config Name="Host Port 2" Target="9791" Default="9791" Mode="tcp" Description="Container Port: 9791" Type="Port" Display="always" Required="true" Mask="false">9791</Config> <Config Name="Host Path 1" Target="/media" Default="/mnt/user/" Mode="ro" Description="Container Path: /media" Type="Path" Display="always" Required="true" Mask="false">/mnt/user/iTunes/Music/</Config> </Container> The config page is attached below. Container is starting well and working as expected. I have 2 remaining questions: is there any way to add a nice icon that is located somewhere on /boot where are the config files? I am not sure that this Docker is surviving a reboot Would be great if you can explain how to do that. Thanks a lot.

Not an important item but I would like to understand if the plugin Fix Common Problems is correct in complaining about the ports and Network Type = Host. TVHeadend is used by KODI.

I have a question related to the Dynamix File Integrity plugin: Is it possible to exclude an entire disk by adding e.g. /mnt/ disk1 into the Custom folders? Only disk2 is always complaining that Build & Export are not up-to-date. Any advise how to fix that? Thanks a lot.

...anyone having an idea? Do you see a similar behaviour of your VM?

Not sure if that is the correct forum but I am having an issue with the NTP server. The time is always behind however the NTP process is running (“Set date & time automatically” is on): ps ax| grep ntp 10290 ?? Ss 0:00.02 /usr/sbin/ntpd -c /private/etc/ntp-restrict.conf -n -g -p /var/run/ntpd.pid -f /var/db/ntp.drift 10321 s002 S+ 0:00.00 grep ntp Is there anything I have overlooked?

@dmacias, I was missing your script after having switched away from my ASROCK board and great to having it back 🙂 I have connected my CPU fan to FANA and FAN1-4 are all case fans. I chose settings according to this (see picture attached). CPU Fan is now running much lower than before (1.000rpm vs. 2.300). No changes yet on the FAN1-4 in terms of rpm as I just installed a dual parity drive and data-rebuild is running, hence the quite high disk temperature requires FAN1-4 to run high.

Thanks a lot CHBMB that fixed the issue with the X-Frame-Options-Header. The webgui of Nextcloud stopped to report issues. Any thoughts what went wrong with my attempt to switch from https://server.com/nextcloud to https://nextcloud.server.com?

CHBMB, thank you soooo much for your guide. I was able to upgrade Nextcloud to the version 12. However I was not able to switch from https://server.com/nextcloud to https://nextcloud.server.com and as result Nextcloud Security scan is showing me a Rating A rather than a Rating A+. There are two elements that the scan is complaining about, please see attached screen shot. appdata/letsencrypt/nginx/site-confs/default: server { listen 443 ssl; server_name dyndns-server.spdns.net; root /config/www; index index.html index.htm index.php; ###SSL Certificates ssl_certificate /config/keys/letsencrypt/fullchain.pem; ssl_certificate_key /config/keys/letsencrypt/privkey.pem; ###Diffie–Hellman key exchange ### ssl_dhparam /config/nginx/dhparams.pem; ###SSL Ciphers ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA'; ###Extra Settings### ssl_prefer_server_ciphers on; ssl_session_cache shared:SSL:10m; ### Add HTTP Strict Transport Security ### add_header Strict-Transport-Security "max-age=63072000; includeSubdomains"; add_header Front-End-Https on; client_max_body_size 0; location / { proxy_pass https://192.168.1.28:444/; proxy_max_temp_file_size 2048m; include /config/nginx/proxy.conf; } } appdata/nextcloud/www/nextcloud/config/config.php: <?php $CONFIG = array ( 'memcache.local' => '\\OC\\Memcache\\APCu', 'datadirectory' => '/data', 'instanceid' => 'oc70mn6ljhz2', 'passwordsalt' => 'secretpassword', 'secret' => 'secretpassword', 'trusted_domains' => array ( 0 => '192.168.1.28:444', 1 => 'dyndns-server.spdns.net', ), 'overwrite.cli.url' => 'https://dyndns-server.spdns.net', 'overwritehost' => 'dyndns-server.spdns.net', 'overwriteprotocol' => 'https', 'dbtype' => 'mysql', 'version' => '12.0.0.29', 'dbname' => 'nextcloud', 'dbhost' => '192.168.1.28:3306', 'dbport' => '', 'dbtableprefix' => 'oc_', 'dbuser' => 'oc_root', 'dbpassword' => 'secretpassword', 'logtimezone' => 'UTC', 'installed' => true, 'default_language' => 'de', 'maintenance' => false, 'defaultapp' => 'files', 'knowledgebaseenabled' => true, 'enable_avatars' => true, 'allow_user_to_change_display_name' => false, 'loglevel' => 0, 'logfile' => '/config/nextcloud.log', 'appstoreenabled' => true, 'updater.release.channel' => 'stable', 'updater.secret' => 'secretpassword', 'theme' => '', ); Second issue is the warning about the X-FRAME-Options Header. Sorry for the german message. I can only get rid of that message by out commenting the parameter in appdata/nextcloud/www/nextcloud/.htaccess like so: <IfModule mod_env.c> # Add security and privacy related headers # Header set X-Frame-Options "SAMEORIGIN"

I just discovered this really nice docker and it is running well. Only thing I discovered it an error message from "Fix Commun Problems" plugin: Docker application CrashPlan has volumes being passed that are mounted by Unassigned Devices, but they are not mounted with the slave option My USB drive is not attached right now, can this cause the message? I don#t know what the SLAVE option is....

Thanks to the HUGHE efforts of @Fireball3 my Dell Perc H200 is running it's first Parity Check at an impressive speed at 168,4 MB/sec. Thank you VERY much.

Meanwhile I was looking into this https://hardforum.com/threads/flashing-it-firmware-to-dell-h200-on-x9scm.1773245/ and this: https://forums.lime-technology.com/topic/25420-m1015-x9scm-f-usb-firmware-tools/ According to these links I was booting into the EFI Shell of my X9SCL-F board and copied the Toolset_PercH310 to LSI9211_P20.00.07.00_efimod to the flash drive. Here is the outcome: sas2flash -l Adapters.txt -listall Adapter Selected is a LSI SAS: SAS2008(B2) Controller is not operational. A firmware download is required. Enter firmware file name or quit to exit: Firmware fault occurred. Fault code: D04 Due to error remaining commands will not be executed. Unable to Process Commands. Exiting SAS2Flash. The boot menu of the adapter card is gone by the way....seems that 1.bat in a previous run did it's job. I will happily test your V2 as soon as it's uploaded. Thank you VERY much for your help.