I would like to switch over to the dev branch since the auth functionality with organizr got broken with the latest updates. How do I achieve this with this docker?

Hello, my NginxProxyManager network mode is bridge. It can reverse proxy docker applications whose network mode is bridge, but it cannot reverse proxy docker applications whose network mode is br0. Is there a solution for this?

3 minutes ago, kennand said:

but it cannot reverse proxy docker applications whose network mode is br0. Is there a solution for this?

 

Greetings.  I am in need of some help.  I am trying to get a cert through NPM, but I keep getting an internal error.  the log shows the following:

 

[12/3/2021] [4:02:23 PM] [Nginx ] › ℹ info Reloading Nginx
[12/3/2021] [4:02:23 PM] [SSL ] › ℹ info Requesting Let'sEncrypt certificates for Cert #74: csmm.spectralforcesrvers.net
[12/3/2021] [4:02:23 PM] [SSL ] › ℹ info Command: certbot certonly --config "/etc/letsencrypt.ini" --cert-name "npm-74" --agree-tos --authenticator webroot --email "[email protected]" --preferred-challenges "dns,http" --domains "csmm.spectralforcesrvers.net"
[12/3/2021] [4:02:24 PM] [Nginx ] › ℹ info Reloading Nginx
[12/3/2021] [4:02:24 PM] [Express ] › ⚠ warning Command failed: certbot certonly --config "/etc/letsencrypt.ini" --cert-name "npm-74" --agree-tos --authenticator webroot --email "[email protected]" --preferred-challenges "dns,http" --domains "csmm.spectralforcesrvers.net"
Another instance of Certbot is already running.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /tmp/tmphxj6981l/log or re-run Certbot with -v for more details.

 

I've got no idea why this is happening, any help would be appreciated.  Thank you!

On 12/3/2021 at 3:06 PM, Spectral Force said:

Greetings.  I am in need of some help.  I am trying to get a cert through NPM, but I keep getting an internal error.  the log shows the following:

 

[12/3/2021] [4:02:23 PM] [Nginx ] › ℹ info Reloading Nginx
[12/3/2021] [4:02:23 PM] [SSL ] › ℹ info Requesting Let'sEncrypt certificates for Cert #74: csmm.spectralforcesrvers.net
[12/3/2021] [4:02:23 PM] [SSL ] › ℹ info Command: certbot certonly --config "/etc/letsencrypt.ini" --cert-name "npm-74" --agree-tos --authenticator webroot --email "[email protected]" --preferred-challenges "dns,http" --domains "csmm.spectralforcesrvers.net"
[12/3/2021] [4:02:24 PM] [Nginx ] › ℹ info Reloading Nginx
[12/3/2021] [4:02:24 PM] [Express ] › ⚠ warning Command failed: certbot certonly --config "/etc/letsencrypt.ini" --cert-name "npm-74" --agree-tos --authenticator webroot --email "[email protected]" --preferred-challenges "dns,http" --domains "csmm.spectralforcesrvers.net"
Another instance of Certbot is already running.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /tmp/tmphxj6981l/log or re-run Certbot with -v for more details.

 

I've got no idea why this is happening, any help would be appreciated.  Thank you!

Any update or fix? I'm still struggling with mine. Thinking about moving back over to Let's Encrypt docker.

1 hour ago, damnshaneisthatu said:

Any update or fix? I'm still struggling with mine. Thinking about moving back over to Let's Encrypt docker.

I've gotten another cert to go through but still don't know why that previous one didn't.  As you can see no one has responded.  I almost think this is a dead thread...

Did you try running it manually to see if you get a different error?

 

(see also the other 100 people that found things when running manually  perhaps your issue is the same)

 

 

I am using it recently. After the first download, the management interface can be opened, but after restarting, there will be problems. After that, the management interface cannot be opened. Please save me thanks

You can try to open a shell for that container and then check that file to see what is wrong.

 

Did you create any custom config? Or perhaps a whitelist of IP addresses? Perhaps a typo or something.

18 hours ago, alexleohy said:

我最近在用。第一次下载后可以打开管理界面，但是重启后就会出现问题。之后就无法打开管理界面了。请救救我谢谢

 

18 hours ago, mattie112 said:

您可以尝试为该容器打开一个 shell，然后检查该文件以查看有什么问题。

 

您是否创建了任何自定义配置？或者也许是 IP 地址的白名单？可能是打字错误什么的。

I don’t have this file in my configuration. This is the first time I use it. After I added the certificate, it couldn’t be used. The error I saw from the background

Open console

 

Then do:

 

And check if anything is "corrupted" in that file. The first number is the line number (your error lists 300 so look around that).

 

You can also delete and reinstall the container if you have only a single site you can easily reconfigure.

On 12/13/2021 at 8:41 PM, mattie112 said:

Open console

 

Then do:

 

And check if anything is "corrupted" in that file. The first number is the line number (your error lists 300 so look around that).

 

You can also delete and reinstall the container if you have only a single site you can easily reconfigure.

Thank you very much, I think I found the problem. The data in line 300 seems to be incorrect. Should I delete the content below line 300?

On the left is docker logs, and on the right is the content of "cat -n /etc/nginx/conf.d/include/ip_ranges.conf".

 

 

I entered docker, deleted the content after 300 lines, nginx worked normally, but whenever I restart nginx, the content of this configuration file will be updated again, and then the above error appears, I think this should be abnormal. I don't know if I should report this problem, it seems that only I encountered it, or I need to write a script to modify the configuration file whenever nginx starts.

O wow that is strange, it should fetch https://ip-ranges.amazonaws.com/ip-ranges.json if I'm correct and that URL works fine here. Can you access that URL from your browser?

Can anyone help me? I've been reading this thread and trying other things I've found online but keep running into errors. I am trying to get my NPM to work but keep getting internal error when I try to use ssl through letsencrypt. I have my domain through godaddy and am using cloudflare. I can reach the url but its just a holding site from godaddy I can't seem my applications any other url that I try gives me an error so it seems to be communicating as the site is there but it won't load the content I am looking for I think it points back to the SSL Internal Error I keep receiving. Any help or suggestions would be greatly appreciated. Thanks guys.

So what is the first part that doesn't work. You have a domain and that shows a site from Godaddy? The something is wrong there (or on cloudflare) as it never gets to your NPM.

 

You can also try a website without SSL just to exclude that from your problems.

5 hours ago, mattie112 said:

So what is the first part that doesn't work. You have a domain and that shows a site from Godaddy? The something is wrong there (or on cloudflare) as it never gets to your NPM.

 

You can also try a website without SSL just to exclude that from your problems.

When I try to Request a new SSL Certificate on NPM I keep getting "internal error". The Proxy host still gets created but it says HTTP only but when I click on it to open it instead of loading my app it just loads a GoDaddy page instead.

Can you try to do it manually? See a couple of posts back, this might give a bit more output. Usually this is somekind of DNS/port forward issue as letsencrypt cannot access your host correctly

Can someone tell me if the Nginx container is impacted by the Log4j vulnerability?

5 hours ago, ThatTallGuy21 said:

Can someone tell me if the Nginx container is impacted by the Log4j vulnerability?

 

On 12/20/2021 at 4:23 AM, Squid said:

 

Thanks for pointing me in the right direction @Squid!

I found I couldn't login anymore, no idea why. So I reset my password according to this procedure from github.

But now I lost my entire configuration! Everywhere I go it says "owner is null". Do I have to set it up again from scratch or can this be fixed somehow?

 

edit: and now I can't login anymore... fantastic

Edited December 24, 20214 yr by lococola

unable to use Custom SSL if you click on SSL Certificates and then choose Custom rather than LetsEncrypt it does absolutely nothing.

app broken on 2 seperate unraid servers. to verify its not on my end and the app backend itself I have done the following:

Restarted.

Uninstalled

Reinstalled

Unsinstalled Again.

Removed the App XML from Flash

Deleted the /appdata installation

Reinstalled 3rd time

Uninstalled

Reinstalled the other guys NGINX PROXY MANAGER by jc21

same thing

pulled out a NUC

created brand new Flash drive.paid another 129 for license

set unraid to use 8008 and 8443. set to Auto, and pulled down LetsEncrypt USB SSL

now that 80/443 not in use, went into router and changed the ip to the new USB.

Rinse and repeat of all the steps above

the Custom was working, and then I did a docker update and it broke.

but different computers, different flash drives, different apps (NGINX REVERSE PROXY MANAGER + NGINX REVERSE PROXY MANAGER OFFICIAL)

I HAVE HSTS ON and set to 1 YEAR for all my domains, meaning I am unable to change back to port 80, and grey the lock out on CFLARE and use LetsEncrypt

I have been using CFLARE with Custom Domain Certs provided from CLFARE using SSL: Full (Strict) until last night

On 12/18/2021 at 2:10 PM, mattie112 said:

Can you try to do it manually? See a couple of posts back, this might give a bit more output. Usually this is somekind of DNS/port forward issue as letsencrypt cannot access your host correctly

 

Sorry I was trying to get this done before heading out of town for Christmas just got back into town and tried this but this is what I am getting after running the manual route. If I try to curl the page it executes in bash but nothing happens it just loads the next line if I "nc IP" it goes to the next line and asks leaves it open to type another command. Any help would be greatly appreciated, I'm pretty sure its something small and dumb that I am overlooking. Thanks.

 

Anyone else getting a "Internal Error" when trying to manually renew a cert?

 

My logs show this when trying manually renew.

[12/28/2021] [9:10:34 AM] [SSL ] › ℹ info Renewing Let'sEncrypt certificates for Cert #12: tautulli.xxx.com
[12/28/2021] [9:10:34 AM] [SSL ] › ℹ info Command: certbot renew --force-renewal --config "/etc/letsencrypt.ini" --cert-name "npm-12" --preferred-challenges "dns,http" --no-random-sleep-on-renew --disable-hook-validation
[12/28/2021] [9:10:34 AM] [Express ] › ⚠ warning Command failed: certbot renew --force-renewal --config "/etc/letsencrypt.ini" --cert-name "npm-12" --preferred-challenges "dns,http" --no-random-sleep-on-renew --disable-hook-validation
An unexpected error occurred:
pkg_resources.ContextualVersionConflict: (cryptography 36.0.1 (/usr/lib/python3.8/site-packages), Requirement.parse('cryptography<4,>=2'), {'dns-lexicon'})
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /tmp/tmpy2mllf8d/log or re-run Certbot with -v for more details.

 

 

I am using cloudflare and proxy status is set to DNS only.

On 12/27/2021 at 6:25 PM, whitesoxwc said:

 

Sorry I was trying to get this done before heading out of town for Christmas just got back into town and tried this but this is what I am getting after running the manual route. If I try to curl the page it executes in bash but nothing happens it just loads the next line if I "nc IP" it goes to the next line and asks leaves it open to type another command. Any help would be greatly appreciated, I'm pretty sure its something small and dumb that I am overlooking. Thanks.

 

 

Well that looks like certbot does not see any certificates that might be due for renew. So I guess it never created a certificate. Perhaps you can try to manually request a certificate and see if that works? https://www.digitalocean.com/community/tutorials/how-to-use-certbot-standalone-mode-to-retrieve-let-s-encrypt-ssl-certificates-on-ubuntu-16-04

 

Also make sure you can access unsecured port 80 (for the .well-known directory) from the public internet as that is requried.