1. The problem I’m having:
Won’t serve site
2. Error messages and/or full log output:
{“level”:“info”,“ts”:1691025092.4498572,“logger”:“http”,“msg”:“enabling automatic TLS certificate management”,“domains”:[“portainer.rebuild2.win”,“rebuild2.win”]}
{“level”:“info”,“ts”:1691025092.4524908,“logger”:“tls”,“msg”:“finished cleaning storage units”}
{“level”:“warn”,“ts”:1691025092.5461206,“logger”:“tls”,“msg”:“stapling OCSP”,“error”:“no OCSP stapling for [rebuild2.win]: parsing OCSP response: ocsp: error from server: unauthorized”,“identifiers”:[“rebuild2.win”]}
{“level”:“info”,“ts”:1691025092.546595,“msg”:“autosaved config (load with --resume flag)”,“file”:“/data/caddy/autosave.json”}
{“level”:“info”,“ts”:1691025092.54661,“msg”:“serving initial configuration”}
{“level”:“info”,“ts”:1691025092.5478563,“logger”:“tls.renew”,“msg”:“acquiring lock”,“identifier”:“rebuild2.win”}
{“level”:“info”,“ts”:1691025092.5496106,“logger”:“watcher”,“msg”:“watching config file for changes”,“config_file”:“/share/caddy2/Caddyfile”}
{“level”:“info”,“ts”:1691025092.5550187,“logger”:“tls.renew”,“msg”:“lock acquired”,“identifier”:“rebuild2.win”}
{“level”:“info”,“ts”:1691025092.555944,“logger”:“tls.renew”,“msg”:“renewing certificate”,“identifier”:“rebuild2.win”,“remaining”:-780196.555942523}
{“level”:“info”,“ts”:1691025092.556704,“logger”:“tls.issuance.acme”,“msg”:“waiting on internal rate limiter”,“identifiers”:[“rebuild2.win”],“ca”:“https://acme-v02.api.letsencrypt.org/directory",“account”:"david@wilfam.net”}
{“level”:“info”,“ts”:1691025092.5567331,“logger”:“tls.issuance.acme”,“msg”:“done waiting on internal rate limiter”,“identifiers”:[“rebuild2.win”],“ca”:“https://acme-v02.api.letsencrypt.org/directory",“account”:"david@wilfam.net”}
{“level”:“info”,“ts”:1691025094.1161518,“logger”:“tls.issuance.acme.acme_client”,“msg”:“trying to solve challenge”,“identifier”:“rebuild2.win”,“challenge_type”:“dns-01”,“ca”:“https://acme-v02.api.letsencrypt.org/directory”}
{“level”:“info”,“ts”:1691025173.022894,“logger”:“tls.issuance.acme.acme_client”,“msg”:“authorization finalized”,“identifier”:“rebuild2.win”,“authz_status”:“valid”}
{“level”:“info”,“ts”:1691025173.0229461,“logger”:“tls.issuance.acme.acme_client”,“msg”:“validations succeeded; finalizing order”,“order”:“https://acme-v02.api.letsencrypt.org/acme/order/451163830/199051889276”}
{“level”:“info”,“ts”:1691025174.4619298,“logger”:“tls.issuance.acme.acme_client”,“msg”:“successfully downloaded available certificate chains”,“count”:2,“first_url”:“https://acme-v02.api.letsencrypt.org/acme/cert/046ca629ecd7a58b176e703cf82ecbf45676”}
{“level”:“info”,“ts”:1691025174.462828,“logger”:“tls.renew”,“msg”:“certificate renewed successfully”,“identifier”:“rebuild2.win”}
{“level”:“info”,“ts”:1691025174.4629736,“logger”:“tls.renew”,“msg”:“releasing lock”,“identifier”:“rebuild2.win”}
{“level”:“info”,“ts”:1691025174.4630651,“logger”:“tls”,“msg”:“reloading managed certificate”,“identifiers”:[“rebuild2.win”]}
{“level”:“info”,“ts”:1691025174.707694,“logger”:“tls.cache”,“msg”:“replaced certificate in cache”,“subjects”:[“rebuild2.win”],“new_expiration”:1698797573}
3. Caddy version:2.7
4. How I installed and ran Caddy: docker with homeassistant addon
a. System environment:
Linux Docker
b. Command:
c. Service/unit/compose file:
PASTE OVER THIS, BETWEEN THE ``` LINES.
Please use the preview pane to ensure it looks nice.
d. My complete Caddy config:
{
email david@wilfam.net
}
(common) {
tls {
dns namecheap {
api_key {env.NAMECHEAP_API_KEY}
user {env.NAMECHEAP_API_USER}
client_ip 203.132.93.83
endpoint https://api.namecheap.com/xml.response
}
}
header {
Strict-Transport-Security "max-age=31536000; includeSubdomains"
X-XSS-Protection "1; mode=block"
X-Content-Type-Options "nosniff"
Referrer-Policy "same-origin"
Permissions-Policy "geolocation=(self) , microphone=()"
Content-Security-Policy "frame-ancestors homeautomation.casa:30443 *.homeautomation.casa:30443"
-Server
}
}
rebuild2.win:30443 {
import common
reverse_proxy localhost:8123 {
}
}
portainer.rebuild2.win:30443 {
import common
reverse_proxy localhost:9000 {
}
}
