1. The problem I’m having:
A complete newbie trying to access local address with custom domain from cloudflare and reverse proxy. Please tell me how to get log files as well, just copy pasted terminal in this one
2. Error messages and/or full log output:
Oct 17 01:57:02 tfr-pogtop caddy[1123018]: {"level":"debug","ts":1729151822.8904467,"logger":"events","msg":"event","name":"cert_obtaining","id":"fa04af8b-8bf5-46a0-9e38-0227a07f2f7e","origin":"tls","data":{"identifier":"immich.caddy.harkirtan.me"}}
Oct 17 01:57:02 tfr-pogtop caddy[1123018]: {"level":"debug","ts":1729151822.891005,"logger":"tls.obtain","msg":"trying issuer 1/1","issuer":"acme-v02.api.letsencrypt.org-directory"}
Oct 17 01:57:02 tfr-pogtop caddy[1123018]: {"level":"info","ts":1729151822.892003,"logger":"tls.issuance.acme","msg":"using ACME account","account_id":"https://acme-staging-v02.api.letsencrypt.org/acme/acct/167510053","account_contact":[]}
Oct 17 01:57:02 tfr-pogtop caddy[1123018]: {"level":"debug","ts":1729151822.8920453,"logger":"tls.issuance.acme.acme_client","msg":"creating order","account":"https://acme-staging-v02.api.letsencrypt.org/acme/acct/167510053","identifiers":["immich.caddy.harkirtan.me"]}
Oct 17 01:57:03 tfr-pogtop caddy[1123018]: {"level":"debug","ts":1729151823.4705272,"logger":"tls.issuance.acme.acme_client","msg":"http request","method":"HEAD","url":"https://acme-staging-v02.api.letsencrypt.org/acme/new-nonce","headers":{"User-Agent":["Caddy/2.8.4 CertMagic acmez (linux; amd64)"]},"response_headers":{"Cache-Control":["public, max-age=0, no-cache"],"Date":["Thu, 17 Oct 2024 07:57:03 GMT"],"Link":["<https://acme-staging-v02.api.letsencrypt.org/directory>;rel=\"index\""],"Replay-Nonce":["Mxxe5XbPgZz9zzZVkOApAe5iQ8tjSehwT18tILC2MHgtq7ZiFL8"],"Server":["nginx"],"Strict-Transport-Security":["max-age=604800"],"X-Frame-Options":["DENY"]},"status_code":200}
Oct 17 01:57:03 tfr-pogtop caddy[1123018]: {"level":"debug","ts":1729151823.5592797,"logger":"tls.issuance.acme.acme_client","msg":"http request","method":"POST","url":"https://acme-staging-v02.api.letsencrypt.org/acme/new-order","headers":{"Content-Type":["application/jose+json"],"User-Agent":["Caddy/2.8.4 CertMagic acmez (linux; amd64)"]},"response_headers":{"Boulder-Requester":["167510053"],"Cache-Control":["public, max-age=0, no-cache"],"Content-Length":["364"],"Content-Type":["application/json"],"Date":["Thu, 17 Oct 2024 07:57:03 GMT"],"Link":["<https://acme-staging-v02.api.letsencrypt.org/directory>;rel=\"index\""],"Location":["https://acme-staging-v02.api.letsencrypt.org/acme/order/167510053/19814018923"],"Replay-Nonce":["Mxxe5XbPf7MZEaso1u7TfweE8Cxhfp508MOLJd-SUetSCWWxe8w"],"Server":["nginx"],"Strict-Transport-Security":["max-age=604800"],"X-Frame-Options":["DENY"]},"status_code":201}
Oct 17 01:57:03 tfr-pogtop caddy[1123018]: {"level":"debug","ts":1729151823.6263325,"logger":"tls.issuance.acme.acme_client","msg":"http request","method":"POST","url":"https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/14464885083","headers":{"Content-Type":["application/jose+json"],"User-Agent":["Caddy/2.8.4 CertMagic acmez (linux; amd64)"]},"response_headers":{"Boulder-Requester":["167510053"],"Cache-Control":["public, max-age=0, no-cache"],"Content-Length":["830"],"Content-Type":["application/json"],"Date":["Thu, 17 Oct 2024 07:57:03 GMT"],"Link":["<https://acme-staging-v02.api.letsencrypt.org/directory>;rel=\"index\""],"Replay-Nonce":["AsXtR2E7KjvtmTn51mPnOJGwUDk-KA63KSG6UkH9GmQjeojuyhI"],"Server":["nginx"],"Strict-Transport-Security":["max-age=604800"],"X-Frame-Options":["DENY"]},"status_code":200}
Oct 17 01:57:03 tfr-pogtop caddy[1123018]: {"level":"info","ts":1729151823.6265965,"logger":"tls.issuance.acme.acme_client","msg":"trying to solve challenge","identifier":"immich.caddy.harkirtan.me","challenge_type":"dns-01","ca":"https://acme-staging-v02.api.letsencrypt.org/directory"}
Oct 17 01:57:03 tfr-pogtop caddy[1123018]: {"level":"error","ts":1729151823.6944177,"logger":"tls.issuance.acme.acme_client","msg":"cleaning up solver","identifier":"immich.caddy.harkirtan.me","challenge_type":"dns-01","error":"no memory of presenting a DNS record for \"_acme-challenge.immich.caddy.harkirtan.me\" (usually OK if presenting also failed)"}
Oct 17 01:57:03 tfr-pogtop caddy[1123018]: {"level":"debug","ts":1729151823.7681267,"logger":"tls.issuance.acme.acme_client","msg":"http request","method":"POST","url":"https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/14464885083","headers":{"Content-Type":["application/jose+json"],"User-Agent":["Caddy/2.8.4 CertMagic acmez (linux; amd64)"]},"response_headers":{"Boulder-Requester":["167510053"],"Cache-Control":["public, max-age=0, no-cache"],"Content-Length":["834"],"Content-Type":["application/json"],"Date":["Thu, 17 Oct 2024 07:57:03 GMT"],"Link":["<https://acme-staging-v02.api.letsencrypt.org/directory>;rel=\"index\""],"Replay-Nonce":["Mxxe5XbPuTgL6RxO3JOHtJgMOuXVAOemOGkWoezFXfgWT2bLA0Q"],"Server":["nginx"],"Strict-Transport-Security":["max-age=604800"],"X-Frame-Options":["DENY"]},"status_code":200}
Oct 17 01:57:03 tfr-pogtop caddy[1123018]: {"level":"error","ts":1729151823.7684433,"logger":"tls.obtain","msg":"could not get certificate from issuer","identifier":"immich.caddy.harkirtan.me","issuer":"acme-v02.api.letsencrypt.org-directory","error":"[immich.caddy.harkirtan.me] solving challenges: presenting for challenge: could not determine zone for domain \"_acme-challenge.immich.caddy.harkirtan.me\": unexpected response code 'NOTIMP' for _acme-challenge.immich.caddy.harkirtan.me. (order=https://acme-staging-v02.api.letsencrypt.org/acme/order/167510053/19814018923) (ca=https://acme-staging-v02.api.letsencrypt.org/directory)"}
Oct 17 01:57:03 tfr-pogtop caddy[1123018]: {"level":"debug","ts":1729151823.7685366,"logger":"events","msg":"event","name":"cert_failed","id":"6abc328f-08ae-4176-90d4-cbb08b5a60da","origin":"tls","data":{"error":{},"identifier":"immich.caddy.harkirtan.me","issuers":["acme-v02.api.letsencrypt.org-directory"],"renewal":false}}
Oct 17 01:57:03 tfr-pogtop caddy[1123018]: {"level":"error","ts":1729151823.7685685,"logger":"tls.obtain","msg":"will retry","error":"[immich.caddy.harkirtan.me] Obtain: [immich.caddy.harkirtan.me] solving challenges: presenting for challenge: could not determine zone for domain \"_acme-challenge.immich.caddy.harkirtan.me\": unexpected response code 'NOTIMP' for _acme-challenge.immich.caddy.harkirtan.me. (order=https://acme-staging-v02.api.letsencrypt.org/acme/order/167510053/19814018923) (ca=https://acme-staging-v02.api.letsencrypt.org/directory)","attempt":6,"retrying_in":600,"elapsed":1204.373307405,"max_duration":2592000}
PASTE OVER THIS, BETWEEN THE ``` LINES.
Please use the preview pane to ensure it looks nice.
3. Caddy version:
v2.8.44. How I installed and ran Caddy:
sudo apt install -y debian-keyring debian-archive-keyring apt-transport-https curl
curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/gpg.key' | sudo gpg --dearmor -o /usr/share/keyrings/caddy-stable-archive-keyring.gpg
curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/debian.deb.txt' | sudo tee /etc/apt/sources.list.d/caddy-stable.list
sudo apt update
sudo apt install caddy
a. System environment:
Linux 6.8.0-47-generic amd64 systemd
b. Command:
systemctl start caddy
PASTE OVER THIS, BETWEEN THE ``` LINES.
Please use the preview pane to ensure it looks nice.
c. Service/unit/compose file:
PASTE OVER THIS, BETWEEN THE ``` LINES.
Please use the preview pane to ensure it looks nice.
d. My complete Caddy config:
# Set this path to your site's directory.
# root * /usr/share/caddy
# Enable the static file server.
# file_server
# Another common task is to set up a reverse proxy:
# reverse_proxy localhost:8080
# Or serve a PHP site through php-fpm:
# php_fastcgi localhost:9000
#}
{
debug
}
(cloudflare) {
tls {
dns cloudflare my api token with zone edit and read permissions
}
}
# immich
immich.caddy.harkirtan.me {
reverse_proxy http://100.106.156.82:2283
import cloudflare
}
# Refer to the Caddy docs for more information:
# https://caddyserver.com/docs/caddyfile
PASTE OVER THIS, BETWEEN THE ``` LINES.
Please use the preview pane to ensure it looks nice.
