Hi, I am new to caddy and got a question that i can’t find any helpful answer on google, and Thanks for your help!
I am runing flask + gunicorn + caddy(0.11.5) on Ubuntu(18.04.2 LTS)
I followed the document to install and run caddy with Caddyfile(show below) in the first time, it worked perfectly.
#Caddyfile
jobplus.linxz.rocks {
root /srv/www/jobplus7-15/
proxy / unix:/run/gunicorn/socket {
transparent
}
log /var/log/caddy/access.log
errors /var/log/caddy/errors.log
}
But when i add one more domian to Caddyfile, it happened with errors.
#Caddyfile
jobplus.linxz.rocks {
root /srv/www/jobplus7-15/
proxy / unix:/run/gunicorn/socket {
transparent
}
log /var/log/caddy/access.log
errors /var/log/caddy/errors.log
}
xinqi.linxz.rocks {
root /srv/www/Xinqi/
proxy / unix:/run/gunicorn/xinqi.socket {
transparent
}
log /var/log/caddy/xinqi_access.log
errors /var/log/caddy/xinqi_errors.log
}
The logs in systemd:
Mar 28 01:53:37 iZwz9845cet96s964va7u8Z systemd[1]: Started Caddy HTTP/2 web server.
Mar 28 01:53:37 iZwz9845cet96s964va7u8Z caddy[6621]: Activating privacy features... 2019/03/28 01:53:37 [INFO][FileStorage:/etc/ssl/caddy] Started certificate maintenance routine
Mar 28 01:53:37 iZwz9845cet96s964va7u8Z caddy[6621]: 2019/03/28 01:53:37 [INFO] [xinqi.linxz.rocks] acme: Obtaining bundled SAN certificate
Mar 28 01:53:39 iZwz9845cet96s964va7u8Z caddy[6621]: 2019/03/28 01:53:39 [INFO] [xinqi.linxz.rocks] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz/MpNiTH6EJNZeHmEM-3rpEoJCVKyvvlcNExbz5ZsYOt0
Mar 28 01:53:39 iZwz9845cet96s964va7u8Z caddy[6621]: 2019/03/28 01:53:39 [INFO] [xinqi.linxz.rocks] acme: use tls-alpn-01 solver
Mar 28 01:53:39 iZwz9845cet96s964va7u8Z caddy[6621]: 2019/03/28 01:53:39 [INFO] [xinqi.linxz.rocks] acme: Trying to solve TLS-ALPN-01
Mar 28 01:53:40 iZwz9845cet96s964va7u8Z caddy[6621]: 2019/03/28 01:53:40 http: TLS handshake error from 64.78.149.164:57882: write tcp 172.18.211.158:443->64.78.149.164:57882: write: connection reset by peer
Mar 28 01:53:46 iZwz9845cet96s964va7u8Z caddy[6621]: 2019/03/28 01:53:46 [xinqi.linxz.rocks] failed to obtain certificate: acme: Error -> One or more domains had a problem:
Mar 28 01:53:46 iZwz9845cet96s964va7u8Z caddy[6621]: [xinqi.linxz.rocks] acme: error: 400 :: urn:ietf:params:acme:error:connection :: Connection reset by peer, url:
Mar 28 01:53:46 iZwz9845cet96s964va7u8Z systemd[1]: caddy.service: Main process exited, code=exited, status=1/FAILURE
Mar 28 01:53:46 iZwz9845cet96s964va7u8Z systemd[1]: caddy.service: Failed with result 'exit-code'.
I have searched about the error message, and sure that 80,443 port are open, no firewall or something blocking, I try runing gunicorn directly to 0.0.0.0:80 or 0.0.0.0:443 and it worked fine.
I tried restart the caddy and using netstat immediately to check the port usage, it seems the caddy only using tcp6 :::443, don’t know if this is the problem.