1. The problem I’m having:
Im using Caddy for reverse proxying of most of my home services. Plex, Immich, Jopling etc. The problem I am having is that autorenewal has failed.
All my subdomains certs expired 3rd of march. Ive found that this is because im geo-blocking all incoming traffic in my firewall. So the acme challenges has been blocked. I have opened the firewall for “any” source location now. But I cant force Caddy to do a renew of the certificates, can I?
Here is the Curl -vL:
% curl -vL https://img.gmx.no
* Host img.gmx.no:443 was resolved.
* IPv6: (none)
* IPv4: 88.92.119.1
* Trying 88.92.119.1:443...
* Connected to img.gmx.no (88.92.119.1) port 443
* ALPN: curl offers h2,http/1.1
* (304) (OUT), TLS handshake, Client hello (1):
* CAfile: /etc/ssl/cert.pem
* CApath: none
* (304) (IN), TLS handshake, Server hello (2):
* (304) (IN), TLS handshake, Unknown (8):
* (304) (IN), TLS handshake, Certificate (11):
* SSL certificate problem: certificate has expired
* Closing connection
curl: (60) SSL certificate problem: certificate has expired
More details here: https://curl.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
2. Error messages and/or full log output:
ERR ts=1741700305.0748024 logger=tls.renew msg=could not get certificate from issuer identifier=img.gmx.no issuer=acme-v02.api.letsencrypt.org-directory error=HTTP 400 urn:ietf:params:acme:error:connection - 88.92.119.1: Timeout during connect (likely firewall problem)
INF ts=1741700305.0748816 logger=tls.issuance.acme msg=waiting on internal rate limiter identifiers=["img.gmx.no"] ca=https://acme.zerossl.com/v2/DV90 account=espen@gmx.no
INF ts=1741700305.0748856 logger=tls.issuance.acme msg=done waiting on internal rate limiter identifiers=["img.gmx.no"] ca=https://acme.zerossl.com/v2/DV90 account=espen@gmx.no
INF ts=1741700305.074891 logger=tls.issuance.acme msg=using ACME account account_id=https://acme.zerossl.com/v2/DV90/account/LOCD8dnnPJUqvmp0_A3Z7w account_contact=["mailto:espen@gmx.no"]
ERR ts=1741700305.1488361 msg=challenge failed identifier=joplin.gmx.no challenge_type=tls-alpn-01 problem={"type":"urn:ietf:params:acme:error:connection","title":"","detail":"88.92.119.1: Timeout during connect (likely firewall problem)","instance":"","subproblems":null} stacktrace=github.com/mholt/acmez/v3.(*Client).pollAuthorization
github.com/mholt/acmez/v3@v3.0.0/client.go:557
github.com/mholt/acmez/v3.(*Client).solveChallenges
github.com/mholt/acmez/v3@v3.0.0/client.go:378
github.com/mholt/acmez/v3.(*Client).ObtainCertificate
github.com/mholt/acmez/v3@v3.0.0/client.go:136
github.com/caddyserver/certmagic.(*ACMEIssuer).doIssue
github.com/caddyserver/certmagic@v0.21.6/acmeissuer.go:477
github.com/caddyserver/certmagic.(*ACMEIssuer).Issue
github.com/caddyserver/certmagic@v0.21.6/acmeissuer.go:371
github.com/caddyserver/caddy/v2/modules/caddytls.(*ACMEIssuer).Issue
github.com/caddyserver/caddy/v2@v2.9.1/modules/caddytls/acmeissuer.go:249
github.com/caddyserver/certmagic.(*Config).renewCert.func2
github.com/caddyserver/certmagic@v0.21.6/config.go:906
github.com/caddyserver/certmagic.doWithRetry
github.com/caddyserver/certmagic@v0.21.6/async.go:104
github.com/caddyserver/certmagic.(*Config).renewCert
github.com/caddyserver/certmagic@v0.21.6/config.go:982
github.com/caddyserver/certmagic.(*Config).RenewCertAsync
github.com/caddyserver/certmagic@v0.21.6/config.go:768
github.com/caddyserver/certmagic.(*Config).manageOne.func2
github.com/caddyserver/certmagic@v0.21.6/config.go:469
github.com/caddyserver/certmagic.(*jobManager).worker
github.com/caddyserver/certmagic@v0.21.6/async.go:73
ERR ts=1741700305.1488736 msg=validating authorization identifier=joplin.gmx.no problem={"type":"urn:ietf:params:acme:error:connection","title":"","detail":"88.92.119.1: Timeout during connect (likely firewall problem)","instance":"","subproblems":null} order=https://acme-v02.api.letsencrypt.org/acme/order/1919698096/362463957056 attempt=2 max_attempts=3 stacktrace=github.com/mholt/acmez/v3.(*Client).ObtainCertificate
github.com/mholt/acmez/v3@v3.0.0/client.go:152
github.com/caddyserver/certmagic.(*ACMEIssuer).doIssue
github.com/caddyserver/certmagic@v0.21.6/acmeissuer.go:477
github.com/caddyserver/certmagic.(*ACMEIssuer).Issue
github.com/caddyserver/certmagic@v0.21.6/acmeissuer.go:371
github.com/caddyserver/caddy/v2/modules/caddytls.(*ACMEIssuer).Issue
github.com/caddyserver/caddy/v2@v2.9.1/modules/caddytls/acmeissuer.go:249
github.com/caddyserver/certmagic.(*Config).renewCert.func2
github.com/caddyserver/certmagic@v0.21.6/config.go:906
github.com/caddyserver/certmagic.doWithRetry
github.com/caddyserver/certmagic@v0.21.6/async.go:104
github.com/caddyserver/certmagic.(*Config).renewCert
github.com/caddyserver/certmagic@v0.21.6/config.go:982
github.com/caddyserver/certmagic.(*Config).RenewCertAsync
github.com/caddyserver/certmagic@v0.21.6/config.go:768
github.com/caddyserver/certmagic.(*Config).manageOne.func2
github.com/caddyserver/certmagic@v0.21.6/config.go:469
github.com/caddyserver/certmagic.(*jobManager).worker
github.com/caddyserver/certmagic@v0.21.6/async.go:73
ERR ts=1741700305.1488914 logger=tls.renew msg=could not get certificate from issuer identifier=joplin.gmx.no issuer=acme-v02.api.letsencrypt.org-directory error=HTTP 400 urn:ietf:params:acme:error:connection - 88.92.119.1: Timeout during connect (likely firewall problem)
INF ts=1741700305.148996 logger=tls.issuance.acme msg=waiting on internal rate limiter identifiers=["joplin.gmx.no"] ca=https://acme.zerossl.com/v2/DV90 account=espen@gmx.no
INF ts=1741700305.1490037 logger=tls.issuance.acme msg=done waiting on internal rate limiter identifiers=["joplin.gmx.no"] ca=https://acme.zerossl.com/v2/DV90 account=espen@gmx.no
INF ts=1741700305.1490076 logger=tls.issuance.acme msg=using ACME account account_id=https://acme.zerossl.com/v2/DV90/account/LOCD8dnnPJUqvmp0_A3Z7w account_contact=["mailto:espen@gmx.no"]
ERR ts=1741700305.1548495 msg=challenge failed identifier=portainer.gmx.no challenge_type=tls-alpn-01 problem={"type":"urn:ietf:params:acme:error:connection","title":"","detail":"88.92.119.1: Timeout during connect (likely firewall problem)","instance":"","subproblems":null} stacktrace=github.com/mholt/acmez/v3.(*Client).pollAuthorization
github.com/mholt/acmez/v3@v3.0.0/client.go:557
github.com/mholt/acmez/v3.(*Client).solveChallenges
github.com/mholt/acmez/v3@v3.0.0/client.go:378
github.com/mholt/acmez/v3.(*Client).ObtainCertificate
github.com/mholt/acmez/v3@v3.0.0/client.go:136
github.com/caddyserver/certmagic.(*ACMEIssuer).doIssue
github.com/caddyserver/certmagic@v0.21.6/acmeissuer.go:477
github.com/caddyserver/certmagic.(*ACMEIssuer).Issue
github.com/caddyserver/certmagic@v0.21.6/acmeissuer.go:371
github.com/caddyserver/caddy/v2/modules/caddytls.(*ACMEIssuer).Issue
github.com/caddyserver/caddy/v2@v2.9.1/modules/caddytls/acmeissuer.go:249
github.com/caddyserver/certmagic.(*Config).renewCert.func2
github.com/caddyserver/certmagic@v0.21.6/config.go:906
github.com/caddyserver/certmagic.doWithRetry
github.com/caddyserver/certmagic@v0.21.6/async.go:104
github.com/caddyserver/certmagic.(*Config).renewCert
github.com/caddyserver/certmagic@v0.21.6/config.go:982
github.com/caddyserver/certmagic.(*Config).RenewCertAsync
github.com/caddyserver/certmagic@v0.21.6/config.go:768
github.com/caddyserver/certmagic.(*Config).manageOne.func2
github.com/caddyserver/certmagic@v0.21.6/config.go:469
github.com/caddyserver/certmagic.(*jobManager).worker
github.com/caddyserver/certmagic@v0.21.6/async.go:73
ERR ts=1741700305.1548798 msg=validating authorization identifier=portainer.gmx.no problem={"type":"urn:ietf:params:acme:error:connection","title":"","detail":"88.92.119.1: Timeout during connect (likely firewall problem)","instance":"","subproblems":null} order=https://acme-v02.api.letsencrypt.org/acme/order/1919698096/362463956516 attempt=2 max_attempts=3 stacktrace=github.com/mholt/acmez/v3.(*Client).ObtainCertificate
github.com/mholt/acmez/v3@v3.0.0/client.go:152
github.com/caddyserver/certmagic.(*ACMEIssuer).doIssue
github.com/caddyserver/certmagic@v0.21.6/acmeissuer.go:477
github.com/caddyserver/certmagic.(*ACMEIssuer).Issue
github.com/caddyserver/certmagic@v0.21.6/acmeissuer.go:371
github.com/caddyserver/caddy/v2/modules/caddytls.(*ACMEIssuer).Issue
github.com/caddyserver/caddy/v2@v2.9.1/modules/caddytls/acmeissuer.go:249
github.com/caddyserver/certmagic.(*Config).renewCert.func2
github.com/caddyserver/certmagic@v0.21.6/config.go:906
github.com/caddyserver/certmagic.doWithRetry
github.com/caddyserver/certmagic@v0.21.6/async.go:104
github.com/caddyserver/certmagic.(*Config).renewCert
github.com/caddyserver/certmagic@v0.21.6/config.go:982
github.com/caddyserver/certmagic.(*Config).RenewCertAsync
github.com/caddyserver/certmagic@v0.21.6/config.go:768
github.com/caddyserver/certmagic.(*Config).manageOne.func2
github.com/caddyserver/certmagic@v0.21.6/config.go:469
github.com/caddyserver/certmagic.(*jobManager).worker
github.com/caddyserver/certmagic@v0.21.6/async.go:73
ERR ts=1741700305.1548994 logger=tls.renew msg=could not get certificate from issuer identifier=portainer.gmx.no issuer=acme-v02.api.letsencrypt.org-directory error=HTTP 400 urn:ietf:params:acme:error:connection - 88.92.119.1: Timeout during connect (likely firewall problem)
INF ts=1741700305.1549828 logger=tls.issuance.acme msg=waiting on internal rate limiter identifiers=["portainer.gmx.no"] ca=https://acme.zerossl.com/v2/DV90 account=espen@gmx.no
INF ts=1741700305.1549897 logger=tls.issuance.acme msg=done waiting on internal rate limiter identifiers=["portainer.gmx.no"] ca=https://acme.zerossl.com/v2/DV90 account=espen@gmx.no
INF ts=1741700305.1549945 logger=tls.issuance.acme msg=using ACME account account_id=https://acme.zerossl.com/v2/DV90/account/LOCD8dnnPJUqvmp0_A3Z7w account_contact=["mailto:espen@gmx.no"]
ERR ts=1741700305.223173 msg=challenge failed identifier=start.gmx.no challenge_type=tls-alpn-01 problem={"type":"urn:ietf:params:acme:error:connection","title":"","detail":"88.92.119.1: Timeout during connect (likely firewall problem)","instance":"","subproblems":null} stacktrace=github.com/mholt/acmez/v3.(*Client).pollAuthorization
github.com/mholt/acmez/v3@v3.0.0/client.go:557
github.com/mholt/acmez/v3.(*Client).solveChallenges
github.com/mholt/acmez/v3@v3.0.0/client.go:378
github.com/mholt/acmez/v3.(*Client).ObtainCertificate
github.com/mholt/acmez/v3@v3.0.0/client.go:136
github.com/caddyserver/certmagic.(*ACMEIssuer).doIssue
github.com/caddyserver/certmagic@v0.21.6/acmeissuer.go:477
github.com/caddyserver/certmagic.(*ACMEIssuer).Issue
github.com/caddyserver/certmagic@v0.21.6/acmeissuer.go:371
github.com/caddyserver/caddy/v2/modules/caddytls.(*ACMEIssuer).Issue
github.com/caddyserver/caddy/v2@v2.9.1/modules/caddytls/acmeissuer.go:249
github.com/caddyserver/certmagic.(*Config).renewCert.func2
github.com/caddyserver/certmagic@v0.21.6/config.go:906
github.com/caddyserver/certmagic.doWithRetry
github.com/caddyserver/certmagic@v0.21.6/async.go:104
github.com/caddyserver/certmagic.(*Config).renewCert
github.com/caddyserver/certmagic@v0.21.6/config.go:982
github.com/caddyserver/certmagic.(*Config).RenewCertAsync
github.com/caddyserver/certmagic@v0.21.6/config.go:768
github.com/caddyserver/certmagic.(*Config).manageOne.func2
github.com/caddyserver/certmagic@v0.21.6/config.go:469
github.com/caddyserver/certmagic.(*jobManager).worker
github.com/caddyserver/certmagic@v0.21.6/async.go:73
ERR ts=1741700305.2232296 msg=validating authorization identifier=start.gmx.no problem={"type":"urn:ietf:params:acme:error:connection","title":"","detail":"88.92.119.1: Timeout during connect (likely firewall problem)","instance":"","subproblems":null} order=https://acme-v02.api.letsencrypt.org/acme/order/1919698096/362463957276 attempt=2 max_attempts=3 stacktrace=github.com/mholt/acmez/v3.(*Client).ObtainCertificate
github.com/mholt/acmez/v3@v3.0.0/client.go:152
github.com/caddyserver/certmagic.(*ACMEIssuer).doIssue
github.com/caddyserver/certmagic@v0.21.6/acmeissuer.go:477
github.com/caddyserver/certmagic.(*ACMEIssuer).Issue
github.com/caddyserver/certmagic@v0.21.6/acmeissuer.go:371
github.com/caddyserver/caddy/v2/modules/caddytls.(*ACMEIssuer).Issue
github.com/caddyserver/caddy/v2@v2.9.1/modules/caddytls/acmeissuer.go:249
github.com/caddyserver/certmagic.(*Config).renewCert.func2
github.com/caddyserver/certmagic@v0.21.6/config.go:906
github.com/caddyserver/certmagic.doWithRetry
github.com/caddyserver/certmagic@v0.21.6/async.go:104
github.com/caddyserver/certmagic.(*Config).renewCert
github.com/caddyserver/certmagic@v0.21.6/config.go:982
github.com/caddyserver/certmagic.(*Config).RenewCertAsync
github.com/caddyserver/certmagic@v0.21.6/config.go:768
github.com/caddyserver/certmagic.(*Config).manageOne.func2
github.com/caddyserver/certmagic@v0.21.6/config.go:469
github.com/caddyserver/certmagic.(*jobManager).worker
github.com/caddyserver/certmagic@v0.21.6/async.go:73
ERR ts=1741700305.2232814 logger=tls.renew msg=could not get certificate from issuer identifier=start.gmx.no issuer=acme-v02.api.letsencrypt.org-directory error=HTTP 400 urn:ietf:params:acme:error:connection - 88.92.119.1: Timeout during connect (likely firewall problem)
INF ts=1741700305.2234359 logger=tls.issuance.acme msg=waiting on internal rate limiter identifiers=["start.gmx.no"] ca=https://acme.zerossl.com/v2/DV90 account=espen@gmx.no
INF ts=1741700305.223448 logger=tls.issuance.acme msg=done waiting on internal rate limiter identifiers=["start.gmx.no"] ca=https://acme.zerossl.com/v2/DV90 account=espen@gmx.no
INF ts=1741700305.2234545 logger=tls.issuance.acme msg=using ACME account account_id=https://acme.zerossl.com/v2/DV90/account/LOCD8dnnPJUqvmp0_A3Z7w account_contact=["mailto:espen@gmx.no"]
INF ts=1741700306.5637279 msg=trying to solve challenge identifier=portainer.gmx.no challenge_type=http-01 ca=https://acme.zerossl.com/v2/DV90
INF ts=1741700306.6274226 msg=trying to solve challenge identifier=img.gmx.no challenge_type=http-01 ca=https://acme.zerossl.com/v2/DV90
INF ts=1741700306.6549037 msg=trying to solve challenge identifier=start.gmx.no challenge_type=http-01 ca=https://acme.zerossl.com/v2/DV90
INF ts=1741700306.7259414 msg=trying to solve challenge identifier=joplin.gmx.no challenge_type=http-01 ca=https://acme.zerossl.com/v2/DV90
INF ts=1741700306.8814466 msg=trying to solve challenge identifier=prox.gmx.no challenge_type=http-01 ca=https://acme.zerossl.com/v2/DV90
INF ts=1741700307.0445848 msg=trying to solve challenge identifier=plex.gmx.no challenge_type=http-01 ca=https://acme.zerossl.com/v2/DV90
INF ts=1741700881.5219095 logger=tls msg=certificate needs renewal based on ARI window subjects=["prox.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.Ko3tQxRbKxLdwzfGTzvnDA next_ari_update=1741710985.136203 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739712444 renewal_cutoff=1739711844
INF ts=1741700881.5221102 logger=tls msg=certificate needs renewal based on ARI window subjects=["img.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.AL3RnTQthlZcoVf9uhLbIgg next_ari_update=1741710985.5463 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739756271 renewal_cutoff=1739755671
INF ts=1741700881.522212 logger=tls msg=certificate needs renewal based on ARI window subjects=["portainer.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.AJtSuwA1ecvcCld7pUKRBTo next_ari_update=1741710985.969505 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739831174 renewal_cutoff=1739830574
INF ts=1741700881.5223014 logger=tls msg=certificate needs renewal based on ARI window subjects=["joplin.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.APWAQZ3BEcy5v-W6r4o_zYU next_ari_update=1741710986.323341 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739804838 renewal_cutoff=1739804238
INF ts=1741700881.5223987 logger=tls msg=certificate needs renewal based on ARI window subjects=["start.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.AJKstcqfJPno4V6AxsG4eYg next_ari_update=1741710986.7232113 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739768613 renewal_cutoff=1739768013
INF ts=1741700881.5224907 logger=tls msg=certificate needs renewal based on ARI window subjects=["plex.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.G6OrWV4pP8cScnaSsu0k6Q next_ari_update=1741710984.7762501 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739790946 renewal_cutoff=1739790346
INF ts=1741700881.5225768 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["prox.gmx.no"] remaining=-740881.522576679
INF ts=1741700881.5225816 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["img.gmx.no"] remaining=-740881.522580988
INF ts=1741700881.5225835 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["portainer.gmx.no"] remaining=-740881.522583422
INF ts=1741700881.522585 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["joplin.gmx.no"] remaining=-740881.522584829
INF ts=1741700881.5225863 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["start.gmx.no"] remaining=-740881.522586353
INF ts=1741700881.5225875 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["plex.gmx.no"] remaining=-740881.522587612
INF ts=1741701481.519927 logger=tls msg=certificate needs renewal based on ARI window subjects=["img.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.AL3RnTQthlZcoVf9uhLbIgg next_ari_update=1741710985.5463 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739756271 renewal_cutoff=1739755671
INF ts=1741701481.5201583 logger=tls msg=certificate needs renewal based on ARI window subjects=["portainer.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.AJtSuwA1ecvcCld7pUKRBTo next_ari_update=1741710985.969505 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739831174 renewal_cutoff=1739830574
INF ts=1741701481.520262 logger=tls msg=certificate needs renewal based on ARI window subjects=["joplin.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.APWAQZ3BEcy5v-W6r4o_zYU next_ari_update=1741710986.323341 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739804838 renewal_cutoff=1739804238
INF ts=1741701481.5203574 logger=tls msg=certificate needs renewal based on ARI window subjects=["start.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.AJKstcqfJPno4V6AxsG4eYg next_ari_update=1741710986.7232113 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739768613 renewal_cutoff=1739768013
INF ts=1741701481.5204537 logger=tls msg=certificate needs renewal based on ARI window subjects=["plex.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.G6OrWV4pP8cScnaSsu0k6Q next_ari_update=1741710984.7762501 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739790946 renewal_cutoff=1739790346
INF ts=1741701481.5205424 logger=tls msg=certificate needs renewal based on ARI window subjects=["prox.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.Ko3tQxRbKxLdwzfGTzvnDA next_ari_update=1741710985.136203 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739712444 renewal_cutoff=1739711844
INF ts=1741701481.5206347 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["img.gmx.no"] remaining=-741481.520634477
INF ts=1741701481.5206387 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["portainer.gmx.no"] remaining=-741481.520638463
INF ts=1741701481.5206404 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["joplin.gmx.no"] remaining=-741481.520640051
INF ts=1741701481.5206413 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["start.gmx.no"] remaining=-741481.520641172
INF ts=1741701481.5206425 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["plex.gmx.no"] remaining=-741481.520642439
INF ts=1741701481.520644 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["prox.gmx.no"] remaining=-741481.520643705
INF ts=1741702081.5180287 logger=tls msg=certificate needs renewal based on ARI window subjects=["img.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.AL3RnTQthlZcoVf9uhLbIgg next_ari_update=1741710985.5463 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739756271 renewal_cutoff=1739755671
INF ts=1741702081.5182426 logger=tls msg=certificate needs renewal based on ARI window subjects=["portainer.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.AJtSuwA1ecvcCld7pUKRBTo next_ari_update=1741710985.969505 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739831174 renewal_cutoff=1739830574
INF ts=1741702081.518337 logger=tls msg=certificate needs renewal based on ARI window subjects=["joplin.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.APWAQZ3BEcy5v-W6r4o_zYU next_ari_update=1741710986.323341 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739804838 renewal_cutoff=1739804238
INF ts=1741702081.5184247 logger=tls msg=certificate needs renewal based on ARI window subjects=["start.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.AJKstcqfJPno4V6AxsG4eYg next_ari_update=1741710986.7232113 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739768613 renewal_cutoff=1739768013
INF ts=1741702081.5185103 logger=tls msg=certificate needs renewal based on ARI window subjects=["plex.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.G6OrWV4pP8cScnaSsu0k6Q next_ari_update=1741710984.7762501 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739790946 renewal_cutoff=1739790346
INF ts=1741702081.5185976 logger=tls msg=certificate needs renewal based on ARI window subjects=["prox.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.Ko3tQxRbKxLdwzfGTzvnDA next_ari_update=1741710985.136203 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739712444 renewal_cutoff=1739711844
INF ts=1741702081.5187056 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["img.gmx.no"] remaining=-742081.518705503
INF ts=1741702081.51871 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["portainer.gmx.no"] remaining=-742081.518709768
INF ts=1741702081.5187118 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["joplin.gmx.no"] remaining=-742081.518711654
INF ts=1741702081.518713 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["start.gmx.no"] remaining=-742081.518713044
INF ts=1741702081.5187144 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["plex.gmx.no"] remaining=-742081.518714249
INF ts=1741702081.5187159 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["prox.gmx.no"] remaining=-742081.518715848
INF ts=1741702681.5204303 logger=tls msg=certificate needs renewal based on ARI window subjects=["portainer.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.AJtSuwA1ecvcCld7pUKRBTo next_ari_update=1741710985.969505 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739831174 renewal_cutoff=1739830574
INF ts=1741702681.5206885 logger=tls msg=certificate needs renewal based on ARI window subjects=["joplin.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.APWAQZ3BEcy5v-W6r4o_zYU next_ari_update=1741710986.323341 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739804838 renewal_cutoff=1739804238
INF ts=1741702681.5207844 logger=tls msg=certificate needs renewal based on ARI window subjects=["start.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.AJKstcqfJPno4V6AxsG4eYg next_ari_update=1741710986.7232113 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739768613 renewal_cutoff=1739768013
INF ts=1741702681.520873 logger=tls msg=certificate needs renewal based on ARI window subjects=["plex.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.G6OrWV4pP8cScnaSsu0k6Q next_ari_update=1741710984.7762501 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739790946 renewal_cutoff=1739790346
INF ts=1741702681.520965 logger=tls msg=certificate needs renewal based on ARI window subjects=["prox.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.Ko3tQxRbKxLdwzfGTzvnDA next_ari_update=1741710985.136203 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739712444 renewal_cutoff=1739711844
INF ts=1741702681.521052 logger=tls msg=certificate needs renewal based on ARI window subjects=["img.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.AL3RnTQthlZcoVf9uhLbIgg next_ari_update=1741710985.5463 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739756271 renewal_cutoff=1739755671
INF ts=1741702681.5211384 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["portainer.gmx.no"] remaining=-742681.521138193
INF ts=1741702681.5211427 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["joplin.gmx.no"] remaining=-742681.52114259
INF ts=1741702681.5211444 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["start.gmx.no"] remaining=-742681.521144323
INF ts=1741702681.521146 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["plex.gmx.no"] remaining=-742681.521145948
INF ts=1741702681.5211475 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["prox.gmx.no"] remaining=-742681.521147241
INF ts=1741702681.5211484 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["img.gmx.no"] remaining=-742681.521148303
INF ts=1741703281.5191498 logger=tls msg=certificate needs renewal based on ARI window subjects=["start.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.AJKstcqfJPno4V6AxsG4eYg next_ari_update=1741710986.7232113 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739768613 renewal_cutoff=1739768013
INF ts=1741703281.5193396 logger=tls msg=certificate needs renewal based on ARI window subjects=["plex.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.G6OrWV4pP8cScnaSsu0k6Q next_ari_update=1741710984.7762501 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739790946 renewal_cutoff=1739790346
INF ts=1741703281.5194347 logger=tls msg=certificate needs renewal based on ARI window subjects=["prox.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.Ko3tQxRbKxLdwzfGTzvnDA next_ari_update=1741710985.136203 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739712444 renewal_cutoff=1739711844
INF ts=1741703281.5195212 logger=tls msg=certificate needs renewal based on ARI window subjects=["img.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.AL3RnTQthlZcoVf9uhLbIgg next_ari_update=1741710985.5463 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739756271 renewal_cutoff=1739755671
INF ts=1741703281.5196078 logger=tls msg=certificate needs renewal based on ARI window subjects=["portainer.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.AJtSuwA1ecvcCld7pUKRBTo next_ari_update=1741710985.969505 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739831174 renewal_cutoff=1739830574
INF ts=1741703281.5197096 logger=tls msg=certificate needs renewal based on ARI window subjects=["joplin.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.APWAQZ3BEcy5v-W6r4o_zYU next_ari_update=1741710986.323341 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739804838 renewal_cutoff=1739804238
INF ts=1741703281.5198119 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["start.gmx.no"] remaining=-743281.51981169
INF ts=1741703281.5198162 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["plex.gmx.no"] remaining=-743281.519816146
INF ts=1741703281.5198188 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["prox.gmx.no"] remaining=-743281.51981807
INF ts=1741703281.51982 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["img.gmx.no"] remaining=-743281.519820042
INF ts=1741703281.5198216 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["portainer.gmx.no"] remaining=-743281.519821373
INF ts=1741703281.5198226 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["joplin.gmx.no"] remaining=-743281.519822579
INF ts=1741703881.518346 logger=tls msg=certificate needs renewal based on ARI window subjects=["plex.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.G6OrWV4pP8cScnaSsu0k6Q next_ari_update=1741710984.7762501 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739790946 renewal_cutoff=1739790346
INF ts=1741703881.5186713 logger=tls msg=certificate needs renewal based on ARI window subjects=["prox.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.Ko3tQxRbKxLdwzfGTzvnDA next_ari_update=1741710985.136203 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739712444 renewal_cutoff=1739711844
INF ts=1741703881.5188432 logger=tls msg=certificate needs renewal based on ARI window subjects=["img.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.AL3RnTQthlZcoVf9uhLbIgg next_ari_update=1741710985.5463 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739756271 renewal_cutoff=1739755671
INF ts=1741703881.5190022 logger=tls msg=certificate needs renewal based on ARI window subjects=["portainer.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.AJtSuwA1ecvcCld7pUKRBTo next_ari_update=1741710985.969505 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739831174 renewal_cutoff=1739830574
INF ts=1741703881.5191586 logger=tls msg=certificate needs renewal based on ARI window subjects=["joplin.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.APWAQZ3BEcy5v-W6r4o_zYU next_ari_update=1741710986.323341 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739804838 renewal_cutoff=1739804238
INF ts=1741703881.519318 logger=tls msg=certificate needs renewal based on ARI window subjects=["start.gmx.no"] expiration=1740960000 ari_cert_id=D2vmS845R672fpAeefAwkZLIX6M.AJKstcqfJPno4V6AxsG4eYg next_ari_update=1741710986.7232113 renew_check_interval=600 window_start=1739663999 window_end=1739836799 selected_time=1739768613 renewal_cutoff=1739768013
INF ts=1741703881.5194566 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["plex.gmx.no"] remaining=-743881.519456372
INF ts=1741703881.5194645 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["prox.gmx.no"] remaining=-743881.519464227
INF ts=1741703881.519467 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["img.gmx.no"] remaining=-743881.519466783
INF ts=1741703881.519469 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["portainer.gmx.no"] remaining=-743881.519468958
INF ts=1741703881.5194712 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["joplin.gmx.no"] remaining=-743881.519471014
INF ts=1741703881.519473 logger=tls.cache.maintenance msg=certificate expires soon; queuing for renewal identifiers=["start.gmx.no"] remaining=-743881.51947293
3. Caddy version:
v2.9.1 h1
4. How I installed and ran Caddy:
Installed via the Portainer template library
a. System environment:
Running in portainer/docker on ubuntu
b. Command:
PASTE OVER THIS, BETWEEN THE ``` LINES.
Please use the preview pane to ensure it looks nice.
d. My complete Caddy config:
# The Caddyfile is an easy way to configure your Caddy web server.
# Unless the file starts with a global options block, the first
# uncommented line is always the address of your site.
# To use your own domain name (with automatic HTTPS), first make
# sure your domain's A/AAAA DNS records are properly pointed to
# this machine's public IP, then replace ":80" below with your
# domain name.
{
email espen@gmx.no
}
start.gmx.no {
reverse_proxy 10.0.10.31:3000
}
plex.gmx.no {
# We don't need to set the X-Forwarded-For and X-Forwarded-Proto headers
# Caddy does this automatically.
reverse_proxy 10.0.10.15:32400
}
prox.gmx.no {
reverse_proxy 10.0.10.30:8006
}
portainer.gmx.no {
reverse_proxy 10.0.10.31:9443
}
x.gmx.no {
reverse_proxy 10.0.10.12:8123
}
img.gmx.no {
reverse_proxy 10.0.10.31:2283
}
joplin.gmx.no {
reverse_proxy 10.0.10.31:22300
}
:80 {
# Set this path to your site's directory.
root * /usr/share/caddy
# Enable the static file server.
file_server
}