Startup minimal system on Raspberry

pampasadmin · November 17, 2024, 6:41pm

1. The problem I’m having:

I try to set up a minimal system on a Raspberry Pi 3B with latest Rasbian OS just to understand it. The reason for this is obviously, that I didn’t get my desired, a bit more complex application to work.
On the raspi I installed docker, portainer and caddy within Portainer. After set up I’ll try to connect to https://homeassistant.reitz-kef.de and get an “400: Bad Request” from my browser (Chrome). I have no idea, where to investigate to fix the problem.

2. Error messages and/or full log output:

docker logs -f --tail 20 caddy
sudo docker logs -f --tail 20 caddy
{"level":"debug","ts":1731841826.0703104,"logger":"http","msg":"starting server loop","address":"[::]:443","tls":true,"http3":true}
{"level":"info","ts":1731841826.070375,"logger":"http.log","msg":"server running","name":"srv0","protocols":["h1","h2","h3"]}
{"level":"debug","ts":1731841826.0706472,"logger":"http","msg":"starting server loop","address":"[::]:80","tls":false,"http3":false}
{"level":"info","ts":1731841826.0706887,"logger":"http.log","msg":"server running","name":"remaining_auto_https_redirects","protocols":["h1","h2","h3"]}
{"level":"info","ts":1731841826.0707104,"logger":"http","msg":"enabling automatic TLS certificate management","domains":["homeassistant.reitz-kef.de"]}
{"level":"debug","ts":1731841826.0721788,"logger":"tls","msg":"loading managed certificate","domain":"homeassistant.reitz-kef.de","expiration":1739460050,"issuer_key":"acme-v02.api.letsencrypt.org-directory","storage":"FileStorage:/data/caddy"}
{"level":"debug","ts":1731841826.0739508,"logger":"tls.cache","msg":"added certificate to cache","subjects":["homeassistant.reitz-kef.de"],"expiration":1739460050,"managed":true,"issuer_key":"acme-v02.api.letsencrypt.org-directory","hash":"5d48310c840a60f81f42b5fc63ff79488c4fa7740fb973c8ac402d1e01031b80","cache_size":1,"cache_capacity":10000}
{"level":"debug","ts":1731841826.074131,"logger":"events","msg":"event","name":"cached_managed_cert","id":"eed97811-1297-47aa-9694-8eba8dfffc13","origin":"tls","data":{"sans":["homeassistant.reitz-kef.de"]}}
{"level":"info","ts":1731841826.0750575,"msg":"autosaved config (load with --resume flag)","file":"/config/caddy/autosave.json"}
{"level":"info","ts":1731841826.075204,"msg":"serving initial configuration"}
{"level":"info","ts":1731841826.0833173,"logger":"tls","msg":"storage cleaning happened too recently; skipping for now","storage":"FileStorage:/data/caddy","instance":"07566f39-ac46-49d3-87d5-5a20bfb4b825","try_again":1731928226.0833106,"try_again_in":86399.999997396}
{"level":"info","ts":1731841826.0837426,"logger":"tls","msg":"finished cleaning storage units"}
{"level":"debug","ts":1731841848.6113696,"logger":"events","msg":"event","name":"tls_get_certificate","id":"4d164b8c-1c0f-4151-8de5-e705e0427e57","origin":"tls","data":{"client_hello":{"CipherSuites":[47802,4865,4866,4867,49195,49199,49196,49200,52393,52392,49171,49172,156,157,47,53],"ServerName":"homeassistant.reitz-kef.de","SupportedCurves":[64250,25497,29,23,24],"SupportedPoints":"AA==","SignatureSchemes":[1027,2052,1025,1283,2053,1281,2054,1537],"SupportedProtos":["h2","http/1.1"],"SupportedVersions":[31354,772,771],"RemoteAddr":{"IP":"62.91.145.78","Port":61173,"Zone":""},"LocalAddr":{"IP":"172.18.0.2","Port":443,"Zone":""}}}}
{"level":"debug","ts":1731841848.6115253,"logger":"tls.handshake","msg":"choosing certificate","identifier":"homeassistant.reitz-kef.de","num_choices":1}
{"level":"debug","ts":1731841848.6116307,"logger":"tls.handshake","msg":"default certificate selection results","identifier":"homeassistant.reitz-kef.de","subjects":["homeassistant.reitz-kef.de"],"managed":true,"issuer_key":"acme-v02.api.letsencrypt.org-directory","hash":"5d48310c840a60f81f42b5fc63ff79488c4fa7740fb973c8ac402d1e01031b80"}
{"level":"debug","ts":1731841848.6116862,"logger":"tls.handshake","msg":"matched certificate in cache","remote_ip":"62.91.145.78","remote_port":"61173","subjects":["homeassistant.reitz-kef.de"],"managed":true,"expiration":1739460050,"hash":"5d48310c840a60f81f42b5fc63ff79488c4fa7740fb973c8ac402d1e01031b80"}
{"level":"debug","ts":1731841848.6317031,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.128:8123","total_upstreams":1}
{"level":"debug","ts":1731841848.6409755,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.128:8123","duration":0.008958817,"request":{"remote_ip":"62.91.145.78","remote_port":"61173","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"homeassistant.reitz-kef.de","uri":"/","headers":{"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-Site":["none"],"Sec-Ch-Ua-Mobile":["?0"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"Sec-Fetch-Mode":["navigate"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"X-Forwarded-Proto":["https"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Cache-Control":["max-age=0"],"Sec-Fetch-User":["?1"],"Priority":["u=0, i"],"Sec-Fetch-Dest":["document"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Upgrade-Insecure-Requests":["1"],"X-Forwarded-For":["62.91.145.78"],"X-Forwarded-Host":["homeassistant.reitz-kef.de"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"homeassistant.reitz-kef.de"}},"headers":{"Date":["Sun, 17 Nov 2024 11:10:48 GMT"],"Server":["Python/3.12 aiohttp/3.9.5"],"Content-Type":["text/plain; charset=utf-8"],"Content-Length":["16"]},"status":400}
{"level":"debug","ts":1731841848.6593516,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.128:8123","total_upstreams":1}
{"level":"debug","ts":1731841848.6662264,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.128:8123","duration":0.006563723,"request":{"remote_ip":"62.91.145.78","remote_port":"61173","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"homeassistant.reitz-kef.de","uri":"/favicon.ico","headers":{"Sec-Fetch-Mode":["no-cors"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""],"Accept":["image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8"],"X-Forwarded-For":["62.91.145.78"],"Sec-Ch-Ua-Platform":["\"Windows\""],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"X-Forwarded-Proto":["https"],"Sec-Fetch-Dest":["image"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Referer":["https://homeassistant.reitz-kef.de/"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Sec-Fetch-Site":["same-origin"],"X-Forwarded-Host":["homeassistant.reitz-kef.de"],"Sec-Ch-Ua-Mobile":["?0"],"Priority":["u=1, i"]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"homeassistant.reitz-kef.de"}},"headers":{"Content-Type":["text/plain; charset=utf-8"],"Content-Length":["16"],"Date":["Sun, 17 Nov 2024 11:10:48 GMT"],"Server":["Python/3.12 aiohttp/3.9.5"]},"status":400}

3. Caddy version:

CADDY_VERSION v2.8.4

4. How I installed and ran Caddy:

a. System environment:

Raspberry Pi 3B, 64GB Flash
Linux caddy 6.6.51+rpt-rpi-v8 #1 SMP PREEMPT Debian 1:6.6.51-1+rpt3 (2024-10-08) aarch64
The LAN is connected with the internet via a fritzbox 7590ax router. DynDNS is enabled on the fritzbox.
DNS provider is IONOS, the domain ist reitz-kef.de. I defined a couple of subdomains, e.g. homeassistant.reitz-kef.de.

b. Command:

I used Portainer, to deploy caddy (see below). The deployment works without errors. Afterwards caddy is marked as "running".

c. Service/unit/compose file:

version: "3"
services:
  web:
    image: caddy
    container_name: "caddy"
    ports:
    - '80:80'
    - '443:443'
    - '8448:8448'
    volumes:
    - /caddy/Caddyfile:/etc/caddy/Caddyfile
    - caddy-data:/data

    restart: unless-stopped
    networks:
    - caddy-network

networks:
  caddy-network:

volumes:
  caddy-data:

d. My complete Caddy config:

{
        debug
}
homeassistant.reitz-kef.de {
        tls reitz_u@reitz-kef.de
        reverse_proxy 192.168.178.128:8123
}

5. Links to relevant resources:

Whitestrake · November 19, 2024, 12:07am

Hrm, looks like an upstream issue. Caddy doesn’t generate 400s for reverse_proxy; its response will always be “whatever the upstream replied with” or a 500-error if something went wrong.

Check out the upstream roundtrip from your debug logs (most of it isn’t important, but at the very end):

{"level":"debug","ts":1731841848.6409755,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.128:8123","duration":0.008958817,"request":{"remote_ip":"62.91.145.78","remote_port":"61173","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"homeassistant.reitz-kef.de","uri":"/","headers":{"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-Site":["none"],"Sec-Ch-Ua-Mobile":["?0"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"Sec-Fetch-Mode":["navigate"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"X-Forwarded-Proto":["https"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Cache-Control":["max-age=0"],"Sec-Fetch-User":["?1"],"Priority":["u=0, i"],"Sec-Fetch-Dest":["document"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Upgrade-Insecure-Requests":["1"],"X-Forwarded-For":["62.91.145.78"],"X-Forwarded-Host":["homeassistant.reitz-kef.de"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"homeassistant.reitz-kef.de"}},"headers":{"Date":["Sun, 17 Nov 2024 11:10:48 GMT"],"Server":["Python/3.12 aiohttp/3.9.5"],"Content-Type":["text/plain; charset=utf-8"],"Content-Length":["16"]},"status":400}

That last "status":400 came from Home Assistant itself; it’s rejecting requests from Caddy.

Do you have any logs in your Home Assistant? Settings → System → Logs

You may have an error along the lines of a request from a reverse proxy was rejected because your HTTP configuration is not set up for reverse proxies. If you do see an error like that, you need to set trusted_proxies in your Home Assistant configuration: https://www.home-assistant.io/integrations/http/#trusted_proxies

pampasadmin · November 19, 2024, 12:47pm

The hint towards the trusted proxies within Homeassistant did it! Thanks a lot! Nextcloud gives a notice in case trusted domain is missing. That a similar mechanism in Homeassistant is implemented was new to me. However, access to my Homeassistant now works,
Next task pending is the integration of mey nextcloud. Its a snap installation directly on an NUC system. Direct access without caddy is fine - now I have to integrate the proxy. I’ll shurely come back with further questions.
Cheers Uli

pampasadmin · November 20, 2024, 3:33pm

Hello again,
now I want to redirect the proxy on the raspberry to my nextcloud. To simplify the setup there is only one reverse proxy.

config in Portainer is as above: no changes

. My complete Caddyfile config:

{
        debug
}
reitz-kef.de {
        tls reitz_u@reitz-kef.de
        reverse_proxy 192.168.178.87
}

. Log after restarting caddy with changes Caddyfile.

Sorry for the huge amount of text. There is a status “301” in conjunction with the desired domain. What’s curious to me are the references to “linuc.reitz-kef.de” and “nextcloud.reitz-kef.de”. I deleted them as trusted domains within the nextcloud, However, I enabled SSH within the nextcloud with

sudo nextcloud.enable-https lets-encrypt
… followed by an email address and the desired domain (see Caddyfile).

Who rememberes the obsolete domains?

Addressing the domain in a browser shows (No change after clearing the cookies) :

Diese Seite funktioniert nicht

reitz-kef.de hat dich zu oft weitergeleitet.

Lösche deine Cookies.
ERR_TOO_MANY_REDIRECTS



sudo docker logs -f --tail 20 caddy
{"level":"info","ts":1732111811.1488476,"msg":"adapted config to JSON","adapter":"caddyfile"}
{"level":"info","ts":1732111811.1525626,"logger":"admin","msg":"admin endpoint started","address":"localhost:2019","enforce_origin":false,"origins":["//localhost:2019","//[::1]:2019","//127.0.0.1:2019"]}
{"level":"info","ts":1732111811.1537044,"logger":"tls.cache.maintenance","msg":"started background certificate maintenance","cache":"0x40003a6c00"}
{"level":"info","ts":1732111811.153789,"logger":"http.auto_https","msg":"server is listening only on the HTTPS port but has no TLS connection policies; adding one to enable TLS","server_name":"srv0","https_port":443}
{"level":"info","ts":1732111811.1541605,"logger":"http.auto_https","msg":"enabling automatic HTTP->HTTPS redirects","server_name":"srv0"}
{"level":"debug","ts":1732111811.1544058,"logger":"http.auto_https","msg":"adjusted config","tls":{"automation":{"policies":[{"subjects":["reitz-kef.de"]},{}]}},"http":{"servers":{"remaining_auto_https_redirects":{"listen":[":80"],"routes":[{},{}]},"srv0":{"listen":[":443"],"routes":[{"handle":[{"handler":"subroute","routes":[{"handle":[{"handler":"reverse_proxy","upstreams":[{"dial":"192.168.178.87:80"}]}]}]}],"terminal":true}],"tls_connection_policies":[{}],"automatic_https":{}}}}}
{"level":"info","ts":1732111811.1560411,"logger":"http","msg":"enabling HTTP/3 listener","addr":":443"}
{"level":"info","ts":1732111811.1564326,"msg":"failed to sufficiently increase receive buffer size (was: 208 kiB, wanted: 7168 kiB, got: 416 kiB). See https://github.com/quic-go/quic-go/wiki/UDP-Buffer-Sizes for details."}
{"level":"debug","ts":1732111811.1572785,"logger":"http","msg":"starting server loop","address":"[::]:443","tls":true,"http3":true}
{"level":"info","ts":1732111811.1573493,"logger":"http.log","msg":"server running","name":"srv0","protocols":["h1","h2","h3"]}
{"level":"debug","ts":1732111811.157648,"logger":"http","msg":"starting server loop","address":"[::]:80","tls":false,"http3":false}
{"level":"info","ts":1732111811.1577017,"logger":"http.log","msg":"server running","name":"remaining_auto_https_redirects","protocols":["h1","h2","h3"]}
{"level":"info","ts":1732111811.1577227,"logger":"http","msg":"enabling automatic TLS certificate management","domains":["reitz-kef.de"]}
{"level":"debug","ts":1732111811.159096,"logger":"tls","msg":"loading managed certificate","domain":"reitz-kef.de","expiration":1739792334,"issuer_key":"acme-v02.api.letsencrypt.org-directory","storage":"FileStorage:/data/caddy"}
{"level":"debug","ts":1732111811.1608403,"logger":"tls.cache","msg":"added certificate to cache","subjects":["reitz-kef.de"],"expiration":1739792334,"managed":true,"issuer_key":"acme-v02.api.letsencrypt.org-directory","hash":"17147d6becf2c3da4fa4b4dbe5696a3e2a05a51552773ec6dbd789b65d51c49e","cache_size":1,"cache_capacity":10000}
{"level":"debug","ts":1732111811.1610267,"logger":"events","msg":"event","name":"cached_managed_cert","id":"7a93d55d-6f24-4678-a6e2-d2ffb5724f53","origin":"tls","data":{"sans":["reitz-kef.de"]}}
{"level":"info","ts":1732111811.1619465,"msg":"autosaved config (load with --resume flag)","file":"/config/caddy/autosave.json"}
{"level":"info","ts":1732111811.162011,"msg":"serving initial configuration"}
{"level":"info","ts":1732111811.1700962,"logger":"tls","msg":"storage cleaning happened too recently; skipping for now","storage":"FileStorage:/data/caddy","instance":"07566f39-ac46-49d3-87d5-5a20bfb4b825","try_again":1732198211.1700897,"try_again_in":86399.999997552}
{"level":"info","ts":1732111811.170815,"logger":"tls","msg":"finished cleaning storage units"}
{"level":"debug","ts":1732111911.1401937,"logger":"events","msg":"event","name":"tls_get_certificate","id":"8f7a84e2-55f4-472b-a3b5-5d013e291576","origin":"tls","data":{"client_hello":{"CipherSuites":[23130,4865,4866,4867,49195,49199,49196,49200,52393,52392,49171,49172,156,157,47,53],"ServerName":"reitz-kef.de","SupportedCurves":[64250,25497,29,23,24],"SupportedPoints":"AA==","SignatureSchemes":[1027,2052,1025,1283,2053,1281,2054,1537],"SupportedProtos":["h2","http/1.1"],"SupportedVersions":[51914,772,771],"RemoteAddr":{"IP":"62.91.145.78","Port":61588,"Zone":""},"LocalAddr":{"IP":"172.18.0.2","Port":443,"Zone":""}}}}
{"level":"debug","ts":1732111911.1406903,"logger":"tls.handshake","msg":"choosing certificate","identifier":"reitz-kef.de","num_choices":1}
{"level":"debug","ts":1732111911.1409016,"logger":"tls.handshake","msg":"default certificate selection results","identifier":"reitz-kef.de","subjects":["reitz-kef.de"],"managed":true,"issuer_key":"acme-v02.api.letsencrypt.org-directory","hash":"17147d6becf2c3da4fa4b4dbe5696a3e2a05a51552773ec6dbd789b65d51c49e"}
{"level":"debug","ts":1732111911.1410568,"logger":"tls.handshake","msg":"matched certificate in cache","remote_ip":"62.91.145.78","remote_port":"61588","subjects":["reitz-kef.de"],"managed":true,"expiration":1739792334,"hash":"17147d6becf2c3da4fa4b4dbe5696a3e2a05a51552773ec6dbd789b65d51c49e"}
{"level":"debug","ts":1732111911.1546836,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111911.1598184,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.00475118,"request":{"remote_ip":"62.91.145.78","remote_port":"61588","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"Accept-Encoding":["gzip, deflate, br, zstd"],"Cookie":["REDACTED"],"X-Forwarded-Proto":["https"],"X-Forwarded-Host":["reitz-kef.de"],"Upgrade-Insecure-Requests":["1"],"Sec-Fetch-Dest":["document"],"Cache-Control":["max-age=0"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Sec-Fetch-User":["?1"],"Priority":["u=0, i"],"Sec-Fetch-Mode":["navigate"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""],"Sec-Fetch-Site":["none"],"Sec-Ch-Ua-Mobile":["?0"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"Sec-Ch-Ua-Platform":["\"Windows\""],"X-Forwarded-For":["62.91.145.78"]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Location":["https://reitz-kef.de:443/"],"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"],"Date":["Wed, 20 Nov 2024 14:11:51 GMT"],"Server":["Apache"]},"status":301}
{"level":"debug","ts":1732111911.170444,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111911.1729765,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.002166867,"request":{"remote_ip":"62.91.145.78","remote_port":"61588","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"Sec-Ch-Ua-Platform":["\"Windows\""],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-Site":["none"],"X-Forwarded-For":["62.91.145.78"],"X-Forwarded-Host":["reitz-kef.de"],"Cookie":["REDACTED"],"Priority":["u=0, i"],"Sec-Ch-Ua-Mobile":["?0"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"X-Forwarded-Proto":["https"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""],"Sec-Fetch-User":["?1"],"Sec-Fetch-Dest":["document"],"Cache-Control":["max-age=0"],"Sec-Fetch-Mode":["navigate"],"Upgrade-Insecure-Requests":["1"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Date":["Wed, 20 Nov 2024 14:11:51 GMT"],"Server":["Apache"],"Location":["https://reitz-kef.de:443/"],"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"]},"status":301}
{"level":"debug","ts":1732111911.1853402,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111911.1879632,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.002244731,"request":{"remote_ip":"62.91.145.78","remote_port":"61588","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Sec-Fetch-User":["?1"],"X-Forwarded-Host":["reitz-kef.de"],"Cache-Control":["max-age=0"],"Sec-Fetch-Mode":["navigate"],"Upgrade-Insecure-Requests":["1"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-Site":["none"],"Cookie":["REDACTED"],"X-Forwarded-For":["62.91.145.78"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Priority":["u=0, i"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""],"X-Forwarded-Proto":["https"],"Sec-Fetch-Dest":["document"]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Date":["Wed, 20 Nov 2024 14:11:51 GMT"],"Server":["Apache"],"Location":["https://reitz-kef.de:443/"],"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"]},"status":301}
{"level":"debug","ts":1732111911.1974502,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111911.200144,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.002268064,"request":{"remote_ip":"62.91.145.78","remote_port":"61588","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Upgrade-Insecure-Requests":["1"],"Priority":["u=0, i"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""],"Sec-Fetch-Site":["none"],"Sec-Fetch-Mode":["navigate"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"X-Forwarded-Host":["reitz-kef.de"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"Sec-Fetch-User":["?1"],"Cache-Control":["max-age=0"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Ch-Ua-Mobile":["?0"],"X-Forwarded-For":["62.91.145.78"],"X-Forwarded-Proto":["https"],"Cookie":["REDACTED"],"Sec-Fetch-Dest":["document"]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Location":["https://reitz-kef.de:443/"],"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"],"Date":["Wed, 20 Nov 2024 14:11:51 GMT"],"Server":["Apache"]},"status":301}
{"level":"debug","ts":1732111911.2101629,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111911.2128408,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.002283428,"request":{"remote_ip":"62.91.145.78","remote_port":"61588","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Sec-Fetch-Site":["none"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Fetch-User":["?1"],"Upgrade-Insecure-Requests":["1"],"X-Forwarded-Proto":["https"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""],"Sec-Ch-Ua-Mobile":["?0"],"Cache-Control":["max-age=0"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"Cookie":["REDACTED"],"Priority":["u=0, i"],"Accept-Encoding":["gzip, deflate, br, zstd"],"X-Forwarded-For":["62.91.145.78"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Sec-Fetch-Dest":["document"],"Sec-Fetch-Mode":["navigate"],"X-Forwarded-Host":["reitz-kef.de"]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Date":["Wed, 20 Nov 2024 14:11:51 GMT"],"Server":["Apache"],"Location":["https://reitz-kef.de:443/"],"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"]},"status":301}
{"level":"debug","ts":1732111911.220206,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111911.2227056,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.002145461,"request":{"remote_ip":"62.91.145.78","remote_port":"61588","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"Cookie":["REDACTED"],"Sec-Fetch-Site":["none"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Sec-Fetch-Dest":["document"],"Sec-Fetch-Mode":["navigate"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Ch-Ua-Mobile":["?0"],"X-Forwarded-For":["62.91.145.78"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""],"Upgrade-Insecure-Requests":["1"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"X-Forwarded-Proto":["https"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Priority":["u=0, i"],"Cache-Control":["max-age=0"],"Sec-Fetch-User":["?1"],"X-Forwarded-Host":["reitz-kef.de"]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Date":["Wed, 20 Nov 2024 14:11:51 GMT"],"Server":["Apache"],"Location":["https://reitz-kef.de:443/"],"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"]},"status":301}
{"level":"debug","ts":1732111911.2300727,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111911.2323184,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.001982596,"request":{"remote_ip":"62.91.145.78","remote_port":"61588","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"Sec-Ch-Ua-Platform":["\"Windows\""],"Accept-Encoding":["gzip, deflate, br, zstd"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Sec-Fetch-Dest":["document"],"Cookie":["REDACTED"],"X-Forwarded-Proto":["https"],"X-Forwarded-Host":["reitz-kef.de"],"Sec-Fetch-Mode":["navigate"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""],"Sec-Ch-Ua-Mobile":["?0"],"Priority":["u=0, i"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"Upgrade-Insecure-Requests":["1"],"Cache-Control":["max-age=0"],"Sec-Fetch-Site":["none"],"Sec-Fetch-User":["?1"],"X-Forwarded-For":["62.91.145.78"]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Content-Type":["text/html; charset=iso-8859-1"],"Date":["Wed, 20 Nov 2024 14:11:51 GMT"],"Server":["Apache"],"Location":["https://reitz-kef.de:443/"],"Content-Length":["233"]},"status":301}
{"level":"debug","ts":1732111911.2404652,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111911.2426353,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.001905513,"request":{"remote_ip":"62.91.145.78","remote_port":"61588","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Fetch-Mode":["navigate"],"Cookie":["REDACTED"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Ch-Ua-Mobile":["?0"],"X-Forwarded-Proto":["https"],"Cache-Control":["max-age=0"],"Priority":["u=0, i"],"X-Forwarded-Host":["reitz-kef.de"],"Sec-Fetch-Site":["none"],"Sec-Fetch-User":["?1"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Sec-Fetch-Dest":["document"],"Upgrade-Insecure-Requests":["1"],"X-Forwarded-For":["62.91.145.78"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Date":["Wed, 20 Nov 2024 14:11:51 GMT"],"Server":["Apache"],"Location":["https://reitz-kef.de:443/"],"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"]},"status":301}
{"level":"debug","ts":1732111911.2501512,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111911.2541099,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.00305728,"request":{"remote_ip":"62.91.145.78","remote_port":"61588","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"X-Forwarded-For":["62.91.145.78"],"X-Forwarded-Proto":["https"],"Accept-Encoding":["gzip, deflate, br, zstd"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"Sec-Fetch-Dest":["document"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Cookie":["REDACTED"],"Sec-Fetch-Site":["none"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Cache-Control":["max-age=0"],"Upgrade-Insecure-Requests":["1"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""],"Sec-Ch-Ua-Mobile":["?0"],"Priority":["u=0, i"],"Sec-Fetch-Mode":["navigate"],"Sec-Fetch-User":["?1"],"X-Forwarded-Host":["reitz-kef.de"]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Date":["Wed, 20 Nov 2024 14:11:51 GMT"],"Server":["Apache"],"Location":["https://reitz-kef.de:443/"],"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"]},"status":301}
{"level":"debug","ts":1732111911.2703936,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111911.2726471,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.001994576,"request":{"remote_ip":"62.91.145.78","remote_port":"61588","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"X-Forwarded-For":["62.91.145.78"],"X-Forwarded-Host":["reitz-kef.de"],"Upgrade-Insecure-Requests":["1"],"Sec-Fetch-User":["?1"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Cache-Control":["max-age=0"],"Sec-Fetch-Site":["none"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Priority":["u=0, i"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Cookie":["REDACTED"],"X-Forwarded-Proto":["https"],"Sec-Ch-Ua-Mobile":["?0"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"Sec-Fetch-Dest":["document"],"Sec-Fetch-Mode":["navigate"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Server":["Apache"],"Location":["https://reitz-kef.de:443/"],"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"],"Date":["Wed, 20 Nov 2024 14:11:51 GMT"]},"status":301}
{"level":"debug","ts":1732111911.2839622,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111911.286223,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.001976763,"request":{"remote_ip":"62.91.145.78","remote_port":"61588","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"X-Forwarded-Host":["reitz-kef.de"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"Cookie":["REDACTED"],"Cache-Control":["max-age=0"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Upgrade-Insecure-Requests":["1"],"Sec-Fetch-Mode":["navigate"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""],"X-Forwarded-For":["62.91.145.78"],"Sec-Fetch-User":["?1"],"X-Forwarded-Proto":["https"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Sec-Fetch-Dest":["document"],"Priority":["u=0, i"],"Sec-Fetch-Site":["none"]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Date":["Wed, 20 Nov 2024 14:11:51 GMT"],"Server":["Apache"],"Location":["https://reitz-kef.de:443/"],"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"]},"status":301}
{"level":"debug","ts":1732111911.2935042,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111911.2957258,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.001963378,"request":{"remote_ip":"62.91.145.78","remote_port":"61588","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Cookie":["REDACTED"],"X-Forwarded-Proto":["https"],"Sec-Ch-Ua-Mobile":["?0"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Sec-Fetch-User":["?1"],"Sec-Fetch-Dest":["document"],"Cache-Control":["max-age=0"],"X-Forwarded-For":["62.91.145.78"],"X-Forwarded-Host":["reitz-kef.de"],"Sec-Fetch-Mode":["navigate"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Priority":["u=0, i"],"Sec-Fetch-Site":["none"],"Upgrade-Insecure-Requests":["1"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Server":["Apache"],"Location":["https://reitz-kef.de:443/"],"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"],"Date":["Wed, 20 Nov 2024 14:11:51 GMT"]},"status":301}
{"level":"debug","ts":1732111911.307818,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111911.3100076,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.001897024,"request":{"remote_ip":"62.91.145.78","remote_port":"61588","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"Sec-Fetch-Dest":["document"],"X-Forwarded-Host":["reitz-kef.de"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-Mode":["navigate"],"Sec-Ch-Ua-Mobile":["?0"],"Cookie":["REDACTED"],"Sec-Fetch-User":["?1"],"Priority":["u=0, i"],"X-Forwarded-For":["62.91.145.78"],"X-Forwarded-Proto":["https"],"Cache-Control":["max-age=0"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Upgrade-Insecure-Requests":["1"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Sec-Fetch-Site":["none"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Date":["Wed, 20 Nov 2024 14:11:51 GMT"],"Server":["Apache"],"Location":["https://reitz-kef.de:443/"],"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"]},"status":301}
{"level":"debug","ts":1732111911.3198397,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111911.3219159,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.001816607,"request":{"remote_ip":"62.91.145.78","remote_port":"61588","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"Sec-Ch-Ua-Mobile":["?0"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-Dest":["document"],"Upgrade-Insecure-Requests":["1"],"Cookie":["REDACTED"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Sec-Fetch-User":["?1"],"Sec-Fetch-Site":["none"],"Sec-Ch-Ua-Platform":["\"Windows\""],"X-Forwarded-Proto":["https"],"Cache-Control":["max-age=0"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"X-Forwarded-For":["62.91.145.78"],"X-Forwarded-Host":["reitz-kef.de"],"Sec-Fetch-Mode":["navigate"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Priority":["u=0, i"]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Location":["https://reitz-kef.de:443/"],"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"],"Date":["Wed, 20 Nov 2024 14:11:51 GMT"],"Server":["Apache"]},"status":301}
{"level":"debug","ts":1732111911.328429,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111911.3305748,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.001865253,"request":{"remote_ip":"62.91.145.78","remote_port":"61588","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"Sec-Ch-Ua-Platform":["\"Windows\""],"X-Forwarded-For":["62.91.145.78"],"Sec-Fetch-Mode":["navigate"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Sec-Fetch-User":["?1"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""],"Sec-Fetch-Dest":["document"],"Upgrade-Insecure-Requests":["1"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Cookie":["REDACTED"],"Priority":["u=0, i"],"Cache-Control":["max-age=0"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Sec-Fetch-Site":["none"],"X-Forwarded-Host":["reitz-kef.de"],"Sec-Ch-Ua-Mobile":["?0"],"X-Forwarded-Proto":["https"]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Content-Type":["text/html; charset=iso-8859-1"],"Date":["Wed, 20 Nov 2024 14:11:51 GMT"],"Server":["Apache"],"Location":["https://reitz-kef.de:443/"],"Content-Length":["233"]},"status":301}
{"level":"debug","ts":1732111911.3378384,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111911.3405206,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.002401397,"request":{"remote_ip":"62.91.145.78","remote_port":"61588","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"Upgrade-Insecure-Requests":["1"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"X-Forwarded-For":["62.91.145.78"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Sec-Fetch-Dest":["document"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Sec-Fetch-Site":["none"],"Sec-Fetch-User":["?1"],"Priority":["u=0, i"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Cache-Control":["max-age=0"],"X-Forwarded-Proto":["https"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""],"Cookie":["REDACTED"],"Sec-Fetch-Mode":["navigate"],"X-Forwarded-Host":["reitz-kef.de"]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Date":["Wed, 20 Nov 2024 14:11:51 GMT"],"Server":["Apache"],"Location":["https://reitz-kef.de:443/"],"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"]},"status":301}
{"level":"debug","ts":1732111911.3488255,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111911.351059,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.00194666,"request":{"remote_ip":"62.91.145.78","remote_port":"61588","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"Upgrade-Insecure-Requests":["1"],"Sec-Fetch-Mode":["navigate"],"Sec-Fetch-User":["?1"],"Sec-Fetch-Dest":["document"],"X-Forwarded-For":["62.91.145.78"],"X-Forwarded-Proto":["https"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Priority":["u=0, i"],"Sec-Fetch-Site":["none"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""],"Cookie":["REDACTED"],"Cache-Control":["max-age=0"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Accept-Encoding":["gzip, deflate, br, zstd"],"X-Forwarded-Host":["reitz-kef.de"]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Date":["Wed, 20 Nov 2024 14:11:51 GMT"],"Server":["Apache"],"Location":["https://reitz-kef.de:443/"],"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"]},"status":301}
{"level":"debug","ts":1732111911.3577101,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111911.359862,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.001847753,"request":{"remote_ip":"62.91.145.78","remote_port":"61588","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"Sec-Fetch-Site":["none"],"Priority":["u=0, i"],"X-Forwarded-Proto":["https"],"Cache-Control":["max-age=0"],"Sec-Fetch-Mode":["navigate"],"X-Forwarded-Host":["reitz-kef.de"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""],"Sec-Ch-Ua-Platform":["\"Windows\""],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Sec-Fetch-User":["?1"],"Sec-Fetch-Dest":["document"],"X-Forwarded-For":["62.91.145.78"],"Sec-Ch-Ua-Mobile":["?0"],"Cookie":["REDACTED"],"Upgrade-Insecure-Requests":["1"]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"],"Date":["Wed, 20 Nov 2024 14:11:51 GMT"],"Server":["Apache"],"Location":["https://reitz-kef.de:443/"]},"status":301}
{"level":"debug","ts":1732111911.3679562,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111911.370233,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.001992232,"request":{"remote_ip":"62.91.145.78","remote_port":"61588","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Cookie":["REDACTED"],"Priority":["u=0, i"],"X-Forwarded-Proto":["https"],"X-Forwarded-Host":["reitz-kef.de"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Upgrade-Insecure-Requests":["1"],"Sec-Fetch-User":["?1"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-Site":["none"],"Cache-Control":["max-age=0"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Fetch-Mode":["navigate"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""],"X-Forwarded-For":["62.91.145.78"],"Sec-Fetch-Dest":["document"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Date":["Wed, 20 Nov 2024 14:11:51 GMT"],"Server":["Apache"],"Location":["https://reitz-kef.de:443/"],"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"]},"status":301}
{"level":"debug","ts":1732111911.3769095,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111911.379974,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.002489834,"request":{"remote_ip":"62.91.145.78","remote_port":"61588","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"Sec-Ch-Ua-Mobile":["?0"],"Sec-Fetch-Dest":["document"],"Sec-Ch-Ua-Platform":["\"Windows\""],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"Cookie":["REDACTED"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""],"X-Forwarded-For":["62.91.145.78"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Sec-Fetch-User":["?1"],"Cache-Control":["max-age=0"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Upgrade-Insecure-Requests":["1"],"Sec-Fetch-Mode":["navigate"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Sec-Fetch-Site":["none"],"Priority":["u=0, i"],"X-Forwarded-Proto":["https"],"X-Forwarded-Host":["reitz-kef.de"]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Server":["Apache"],"Location":["https://reitz-kef.de:443/"],"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"],"Date":["Wed, 20 Nov 2024 14:11:51 GMT"]},"status":301}
{"level":"debug","ts":1732111933.7972484,"logger":"events","msg":"event","name":"tls_get_certificate","id":"577c9e72-2c1f-4b76-b41e-0aa3a4bb4c08","origin":"tls","data":{"client_hello":{"CipherSuites":[56026,4865,4866,4867,49195,49199,49196,49200,52393,52392,49171,49172,156,157,47,53],"ServerName":"homeassistant.reitz-kef.de","SupportedCurves":[43690,25497,29,23,24],"SupportedPoints":"AA==","SignatureSchemes":[1027,2052,1025,1283,2053,1281,2054,1537],"SupportedProtos":["h2","http/1.1"],"SupportedVersions":[2570,772,771],"RemoteAddr":{"IP":"62.91.145.78","Port":59864,"Zone":""},"LocalAddr":{"IP":"172.18.0.2","Port":443,"Zone":""}}}}
{"level":"debug","ts":1732111933.7973442,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"homeassistant.reitz-kef.de"}
{"level":"debug","ts":1732111933.7973697,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"*.reitz-kef.de"}
{"level":"debug","ts":1732111933.7973855,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"*.*.de"}
{"level":"debug","ts":1732111933.7974012,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"*.*.*"}
{"level":"debug","ts":1732111933.7974463,"logger":"tls.handshake","msg":"no certificate matching TLS ClientHello","remote_ip":"62.91.145.78","remote_port":"59864","server_name":"homeassistant.reitz-kef.de","remote":"62.91.145.78:59864","identifier":"homeassistant.reitz-kef.de","cipher_suites":[56026,4865,4866,4867,49195,49199,49196,49200,52393,52392,49171,49172,156,157,47,53],"cert_cache_fill":0.0001,"load_or_obtain_if_necessary":true,"on_demand":false}
{"level":"debug","ts":1732111933.7979047,"logger":"http.stdlib","msg":"http: TLS handshake error from 62.91.145.78:59864: no certificate available for 'homeassistant.reitz-kef.de'"}
{"level":"debug","ts":1732111933.815192,"logger":"events","msg":"event","name":"tls_get_certificate","id":"5d671b96-3d26-41c1-bc78-f707b39025f0","origin":"tls","data":{"client_hello":{"CipherSuites":[2570,4865,4866,4867,49195,49199,49196,49200,52393,52392,49171,49172,156,157,47,53],"ServerName":"homeassistant.reitz-kef.de","SupportedCurves":[6682,25497,29,23,24],"SupportedPoints":"AA==","SignatureSchemes":[1027,2052,1025,1283,2053,1281,2054,1537],"SupportedProtos":["h2","http/1.1"],"SupportedVersions":[2570,772,771],"RemoteAddr":{"IP":"62.91.145.78","Port":61392,"Zone":""},"LocalAddr":{"IP":"172.18.0.2","Port":443,"Zone":""}}}}
{"level":"debug","ts":1732111933.8152843,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"homeassistant.reitz-kef.de"}
{"level":"debug","ts":1732111933.8153222,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"*.reitz-kef.de"}
{"level":"debug","ts":1732111933.8153389,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"*.*.de"}
{"level":"debug","ts":1732111933.8153539,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"*.*.*"}
{"level":"debug","ts":1732111933.8153863,"logger":"tls.handshake","msg":"no certificate matching TLS ClientHello","remote_ip":"62.91.145.78","remote_port":"61392","server_name":"homeassistant.reitz-kef.de","remote":"62.91.145.78:61392","identifier":"homeassistant.reitz-kef.de","cipher_suites":[2570,4865,4866,4867,49195,49199,49196,49200,52393,52392,49171,49172,156,157,47,53],"cert_cache_fill":0.0001,"load_or_obtain_if_necessary":true,"on_demand":false}
{"level":"debug","ts":1732111933.8158479,"logger":"http.stdlib","msg":"http: TLS handshake error from 62.91.145.78:61392: no certificate available for 'homeassistant.reitz-kef.de'"}
{"level":"debug","ts":1732111933.8341415,"logger":"events","msg":"event","name":"tls_get_certificate","id":"e53d7088-937d-4eee-8275-83edfd193707","origin":"tls","data":{"client_hello":{"CipherSuites":[19018,4865,4866,4867,49195,49199,49196,49200,52393,52392,49171,49172,156,157,47,53],"ServerName":"homeassistant.reitz-kef.de","SupportedCurves":[60138,25497,29,23,24],"SupportedPoints":"AA==","SignatureSchemes":[1027,2052,1025,1283,2053,1281,2054,1537],"SupportedProtos":["h2","http/1.1"],"SupportedVersions":[23130,772,771],"RemoteAddr":{"IP":"62.91.145.78","Port":60609,"Zone":""},"LocalAddr":{"IP":"172.18.0.2","Port":443,"Zone":""}}}}
{"level":"debug","ts":1732111933.8342438,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"homeassistant.reitz-kef.de"}
{"level":"debug","ts":1732111933.8342683,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"*.reitz-kef.de"}
{"level":"debug","ts":1732111933.8342881,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"*.*.de"}
{"level":"debug","ts":1732111933.8343031,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"*.*.*"}
{"level":"debug","ts":1732111933.8343382,"logger":"tls.handshake","msg":"no certificate matching TLS ClientHello","remote_ip":"62.91.145.78","remote_port":"60609","server_name":"homeassistant.reitz-kef.de","remote":"62.91.145.78:60609","identifier":"homeassistant.reitz-kef.de","cipher_suites":[19018,4865,4866,4867,49195,49199,49196,49200,52393,52392,49171,49172,156,157,47,53],"cert_cache_fill":0.0001,"load_or_obtain_if_necessary":true,"on_demand":false}
{"level":"debug","ts":1732111933.8347144,"logger":"http.stdlib","msg":"http: TLS handshake error from 62.91.145.78:60609: no certificate available for 'homeassistant.reitz-kef.de'"}
{"level":"debug","ts":1732111933.8554587,"logger":"events","msg":"event","name":"tls_get_certificate","id":"b66d49c4-71cf-4898-8c3a-2ed6c6237003","origin":"tls","data":{"client_hello":{"CipherSuites":[19018,4865,4866,4867,49195,49199,49196,49200,52393,52392,49171,49172,156,157,47,53],"ServerName":"homeassistant.reitz-kef.de","SupportedCurves":[39578,25497,29,23,24],"SupportedPoints":"AA==","SignatureSchemes":[1027,2052,1025,1283,2053,1281,2054,1537],"SupportedProtos":["h2","http/1.1"],"SupportedVersions":[19018,772,771],"RemoteAddr":{"IP":"62.91.145.78","Port":62995,"Zone":""},"LocalAddr":{"IP":"172.18.0.2","Port":443,"Zone":""}}}}
{"level":"debug","ts":1732111933.8555593,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"homeassistant.reitz-kef.de"}
{"level":"debug","ts":1732111933.8555834,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"*.reitz-kef.de"}
{"level":"debug","ts":1732111933.855599,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"*.*.de"}
{"level":"debug","ts":1732111933.855614,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"*.*.*"}
{"level":"debug","ts":1732111933.8556457,"logger":"tls.handshake","msg":"no certificate matching TLS ClientHello","remote_ip":"62.91.145.78","remote_port":"62995","server_name":"homeassistant.reitz-kef.de","remote":"62.91.145.78:62995","identifier":"homeassistant.reitz-kef.de","cipher_suites":[19018,4865,4866,4867,49195,49199,49196,49200,52393,52392,49171,49172,156,157,47,53],"cert_cache_fill":0.0001,"load_or_obtain_if_necessary":true,"on_demand":false}
{"level":"debug","ts":1732111933.856056,"logger":"http.stdlib","msg":"http: TLS handshake error from 62.91.145.78:62995: no certificate available for 'homeassistant.reitz-kef.de'"}
{"level":"debug","ts":1732111943.042698,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111943.0476103,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.004553263,"request":{"remote_ip":"62.91.145.78","remote_port":"62761","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Sec-Fetch-Mode":["navigate"],"X-Forwarded-For":["62.91.145.78"],"X-Forwarded-Proto":["https"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-User":["?1"],"Sec-Fetch-Site":["none"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Priority":["u=0, i"],"Cache-Control":["max-age=0"],"X-Forwarded-Host":["reitz-kef.de"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Fetch-Dest":["document"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""],"Sec-Ch-Ua-Platform":["\"Windows\""],"Upgrade-Insecure-Requests":["1"]},"tls":{"resumed":true,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Date":["Wed, 20 Nov 2024 14:12:23 GMT"],"Server":["Apache"],"Location":["https://reitz-kef.de:443/"],"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"]},"status":301}
{"level":"debug","ts":1732111943.0552804,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111943.0587764,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.003134207,"request":{"remote_ip":"62.91.145.78","remote_port":"62761","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"Sec-Fetch-User":["?1"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Cache-Control":["max-age=0"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Priority":["u=0, i"],"X-Forwarded-For":["62.91.145.78"],"X-Forwarded-Host":["reitz-kef.de"],"Sec-Fetch-Site":["none"],"Sec-Ch-Ua-Mobile":["?0"],"Upgrade-Insecure-Requests":["1"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Sec-Fetch-Mode":["navigate"],"Sec-Fetch-Dest":["document"],"X-Forwarded-Proto":["https"]},"tls":{"resumed":true,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Date":["Wed, 20 Nov 2024 14:12:23 GMT"],"Server":["Apache"],"Location":["https://reitz-kef.de:443/"],"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"]},"status":301}
{"level":"debug","ts":1732111943.0680764,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111943.0708532,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.002341606,"request":{"remote_ip":"62.91.145.78","remote_port":"62761","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"Sec-Fetch-Mode":["navigate"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Sec-Ch-Ua-Mobile":["?0"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Priority":["u=0, i"],"Sec-Ch-Ua-Platform":["\"Windows\""],"X-Forwarded-For":["62.91.145.78"],"Sec-Fetch-User":["?1"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""],"Sec-Fetch-Dest":["document"],"X-Forwarded-Host":["reitz-kef.de"],"Upgrade-Insecure-Requests":["1"],"Sec-Fetch-Site":["none"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"X-Forwarded-Proto":["https"],"Cache-Control":["max-age=0"]},"tls":{"resumed":true,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"],"Date":["Wed, 20 Nov 2024 14:12:23 GMT"],"Server":["Apache"],"Location":["https://reitz-kef.de:443/"]},"status":301}
{"level":"debug","ts":1732111943.078649,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111943.0811222,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.002113586,"request":{"remote_ip":"62.91.145.78","remote_port":"62761","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"Sec-Ch-Ua-Mobile":["?0"],"Upgrade-Insecure-Requests":["1"],"Cache-Control":["max-age=0"],"Sec-Fetch-Dest":["document"],"X-Forwarded-Proto":["https"],"X-Forwarded-Host":["reitz-kef.de"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Fetch-Mode":["navigate"],"Sec-Fetch-User":["?1"],"X-Forwarded-For":["62.91.145.78"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Priority":["u=0, i"],"Sec-Fetch-Site":["none"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"]},"tls":{"resumed":true,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Location":["https://reitz-kef.de:443/"],"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"],"Date":["Wed, 20 Nov 2024 14:12:23 GMT"],"Server":["Apache"]},"status":301}
{"level":"debug","ts":1732111943.0890415,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111943.091678,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.00219046,"request":{"remote_ip":"62.91.145.78","remote_port":"62761","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"Priority":["u=0, i"],"X-Forwarded-For":["62.91.145.78"],"X-Forwarded-Host":["reitz-kef.de"],"Cache-Control":["max-age=0"],"Sec-Fetch-Site":["none"],"Sec-Fetch-User":["?1"],"Sec-Fetch-Dest":["document"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Ch-Ua-Platform":["\"Windows\""],"X-Forwarded-Proto":["https"],"Upgrade-Insecure-Requests":["1"],"Sec-Fetch-Mode":["navigate"],"Sec-Ch-Ua-Mobile":["?0"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""]},"tls":{"resumed":true,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"],"Date":["Wed, 20 Nov 2024 14:12:23 GMT"],"Server":["Apache"],"Location":["https://reitz-kef.de:443/"]},"status":301}
{"level":"debug","ts":1732111943.0986974,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111943.1008766,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.001880149,"request":{"remote_ip":"62.91.145.78","remote_port":"62761","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"Accept-Encoding":["gzip, deflate, br, zstd"],"X-Forwarded-Proto":["https"],"Upgrade-Insecure-Requests":["1"],"Sec-Fetch-User":["?1"],"Cache-Control":["max-age=0"],"X-Forwarded-For":["62.91.145.78"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Sec-Fetch-Site":["none"],"Sec-Fetch-Mode":["navigate"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""],"X-Forwarded-Host":["reitz-kef.de"],"Sec-Fetch-Dest":["document"],"Priority":["u=0, i"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"]},"tls":{"resumed":true,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Date":["Wed, 20 Nov 2024 14:12:23 GMT"],"Server":["Apache"],"Location":["https://reitz-kef.de:443/"],"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"]},"status":301}
{"level":"debug","ts":1732111943.1088083,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111943.1110325,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.001949732,"request":{"remote_ip":"62.91.145.78","remote_port":"62761","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-User":["?1"],"X-Forwarded-For":["62.91.145.78"],"Priority":["u=0, i"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Ch-Ua-Platform":["\"Windows\""],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"X-Forwarded-Proto":["https"],"X-Forwarded-Host":["reitz-kef.de"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Cache-Control":["max-age=0"],"Upgrade-Insecure-Requests":["1"],"Sec-Fetch-Site":["none"],"Sec-Fetch-Dest":["document"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Sec-Fetch-Mode":["navigate"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""]},"tls":{"resumed":true,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Date":["Wed, 20 Nov 2024 14:12:23 GMT"],"Server":["Apache"],"Location":["https://reitz-kef.de:443/"],"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"]},"status":301}
{"level":"debug","ts":1732111943.1187727,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111943.121027,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.001974576,"request":{"remote_ip":"62.91.145.78","remote_port":"62761","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"X-Forwarded-Proto":["https"],"X-Forwarded-Host":["reitz-kef.de"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Priority":["u=0, i"],"Sec-Fetch-User":["?1"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""],"X-Forwarded-For":["62.91.145.78"],"Sec-Fetch-Mode":["navigate"],"Upgrade-Insecure-Requests":["1"],"Sec-Ch-Ua-Mobile":["?0"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Sec-Fetch-Dest":["document"],"Sec-Fetch-Site":["none"],"Cache-Control":["max-age=0"]},"tls":{"resumed":true,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Server":["Apache"],"Location":["https://reitz-kef.de:443/"],"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"],"Date":["Wed, 20 Nov 2024 14:12:23 GMT"]},"status":301}
{"level":"debug","ts":1732111943.128085,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:80","total_upstreams":1}
{"level":"debug","ts":1732111943.1303213,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:80","duration":0.001912649,"request":{"remote_ip":"62.91.145.78","remote_port":"62761","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"Sec-Fetch-User":["?1"],"Sec-Ch-Ua-Mobile":["?0"],"Accept-Encoding":["gzip, deflate, br, zstd"],"X-Forwarded-For":["62.91.145.78"],"X-Forwarded-Proto":["https"],"X-Forwarded-Host":["reitz-kef.de"],"Sec-Fetch-Dest":["document"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Upgrade-Insecure-Requests":["1"],"Priority":["u=0, i"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Sec-Fetch-Site":["none"],"Sec-Fetch-Mode":["navigate"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"],"Cache-Control":["max-age=0"],"Sec-Ch-Ua":["\"Chromium\";v=\"130\", \"Google Chrome\";v=\"130\", \"Not?A_Brand\";v=\"99\""],"Sec-Ch-Ua-Platform":["\"Windows\""]},"tls":{"resumed":true,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"headers":{"Date":["Wed, 20 Nov 2024 14:12:23 GMT"],"Server":["Apache"],"Location":["https://reitz-kef.de:443/"],"Content-Length":["233"],"Content-Type":["text/html; charset=iso-8859-1"]},"status":301}

Thanks to all them who take a look into the log.
Cheers
Uli

Whitestrake · November 21, 2024, 12:30am

Ahh, this one’s an easy one to solve.

Minor point, this doesn’t enable SSH (secure shell), it enables HTTPS.

With this command you’ve configured Nextcloud to get its own HTTPS certs via ACME and serve its site on HTTPS.

However, you’ve configured Caddy to proxy to HTTP:

(There is an implicit http:// scheme by default, which comes with an implicit :80 port, so this proxy is connecting to http://192.168.178.87:80.)

So we have this scenario:

Client connects to Caddy over HTTPS.
Caddy proxies to Nextcloud over HTTP.
Nextcloud tells Caddy, “go away and come back over HTTPS”.
Caddy faithfully returns Nextcloud’s response to the client.
The client follows the redirect. Go back to step 1.

You’ll want to either disable HTTPS on Nextcloud, or tell Caddy to connect over HTTPS. The former (disabling Nextcloud HTTPS) might be more desirable because Nextcloud may or may not run into issues getting LetsEncrypt certs if it’s behind Caddy. If that’s not a concern though you can tell Caddy to proxy to HTTPS just by specifying that, e.g.: reverse_proxy https://192.168.178.87 (although I don’t know if Nextcloud will require SNI, which will involve further Caddy configuration).

pampasadmin · November 21, 2024, 9:50am

Thanks Matthew,
its as you stated : I changed the Caddyfile to access the proxied IP via https:// as in your example - and get the next challenge (just to avoid the word problem):

sudo docker logs -f --tail 20 caddy
{"level":"info","ts":1732181203.5985248,"msg":"adapted config to JSON","adapter":"caddyfile"}
{"level":"info","ts":1732181203.6024466,"logger":"admin","msg":"admin endpoint started","address":"localhost:2019","enforce_origin":false,"origins":["//localhost:2019","//[::1]:2019","//127.0.0.1:2019"]}
{"level":"info","ts":1732181203.6032052,"logger":"tls.cache.maintenance","msg":"started background certificate maintenance","cache":"0x4000492a00"}
{"level":"info","ts":1732181203.6033466,"logger":"http.auto_https","msg":"server is listening only on the HTTPS port but has no TLS connection policies; adding one to enable TLS","server_name":"srv0","https_port":443}
{"level":"info","ts":1732181203.6033938,"logger":"http.auto_https","msg":"enabling automatic HTTP->HTTPS redirects","server_name":"srv0"}
{"level":"debug","ts":1732181203.6035814,"logger":"http.auto_https","msg":"adjusted config","tls":{"automation":{"policies":[{"subjects":["reitz-kef.de"]},{}]}},"http":{"servers":{"remaining_auto_https_redirects":{"listen":[":80"],"routes":[{},{}]},"srv0":{"listen":[":443"],"routes":[{"handle":[{"handler":"subroute","routes":[{"handle":[{"handler":"reverse_proxy","transport":{"protocol":"http","tls":{}},"upstreams":[{"dial":"192.168.178.87:443"}]}]}]}],"terminal":true}],"tls_connection_policies":[{}],"automatic_https":{}}}}}
{"level":"info","ts":1732181203.6054115,"logger":"http","msg":"enabling HTTP/3 listener","addr":":443"}
{"level":"info","ts":1732181203.6057715,"msg":"failed to sufficiently increase receive buffer size (was: 208 kiB, wanted: 7168 kiB, got: 416 kiB). See https://github.com/quic-go/quic-go/wiki/UDP-Buffer-Sizes for details."}
{"level":"debug","ts":1732181203.606713,"logger":"http","msg":"starting server loop","address":"[::]:443","tls":true,"http3":true}
{"level":"info","ts":1732181203.6067946,"logger":"http.log","msg":"server running","name":"srv0","protocols":["h1","h2","h3"]}
{"level":"debug","ts":1732181203.6071527,"logger":"http","msg":"starting server loop","address":"[::]:80","tls":false,"http3":false}
{"level":"info","ts":1732181203.6072304,"logger":"http.log","msg":"server running","name":"remaining_auto_https_redirects","protocols":["h1","h2","h3"]}
{"level":"info","ts":1732181203.6072545,"logger":"http","msg":"enabling automatic TLS certificate management","domains":["reitz-kef.de"]}
{"level":"debug","ts":1732181203.6087744,"logger":"tls","msg":"loading managed certificate","domain":"reitz-kef.de","expiration":1739792334,"issuer_key":"acme-v02.api.letsencrypt.org-directory","storage":"FileStorage:/data/caddy"}
{"level":"debug","ts":1732181203.610445,"logger":"tls.cache","msg":"added certificate to cache","subjects":["reitz-kef.de"],"expiration":1739792334,"managed":true,"issuer_key":"acme-v02.api.letsencrypt.org-directory","hash":"17147d6becf2c3da4fa4b4dbe5696a3e2a05a51552773ec6dbd789b65d51c49e","cache_size":1,"cache_capacity":10000}
{"level":"debug","ts":1732181203.610621,"logger":"events","msg":"event","name":"cached_managed_cert","id":"444a30f3-7d6a-452b-b071-5dcd020b7700","origin":"tls","data":{"sans":["reitz-kef.de"]}}
{"level":"info","ts":1732181203.6119547,"msg":"autosaved config (load with --resume flag)","file":"/config/caddy/autosave.json"}
{"level":"info","ts":1732181203.61202,"msg":"serving initial configuration"}
{"level":"info","ts":1732181203.6150422,"logger":"tls","msg":"storage cleaning happened too recently; skipping for now","storage":"FileStorage:/data/caddy","instance":"07566f39-ac46-49d3-87d5-5a20bfb4b825","try_again":1732267603.6150355,"try_again_in":86399.999997657}
{"level":"info","ts":1732181203.6154687,"logger":"tls","msg":"finished cleaning storage units"}
^[[B{"level":"debug","ts":1732181249.0480409,"logger":"events","msg":"event","name":"tls_get_certificate","id":"9de6a354-b8e2-49b7-aaa9-4c04401bf127","origin":"tls","data":{"client_hello":{"CipherSuites":[47802,4865,4866,4867,49195,49199,49196,49200,52393,52392,49171,49172,156,157,47,53],"ServerName":"reitz-kef.de","SupportedCurves":[51914,4588,29,23,24],"SupportedPoints":"AA==","SignatureSchemes":[1027,2052,1025,1283,2053,1281,2054,1537],"SupportedProtos":["h2","http/1.1"],"SupportedVersions":[14906,772,771],"RemoteAddr":{"IP":"62.91.145.78","Port":60968,"Zone":""},"LocalAddr":{"IP":"172.18.0.2","Port":443,"Zone":""}}}}
{"level":"debug","ts":1732181249.0483112,"logger":"tls.handshake","msg":"choosing certificate","identifier":"reitz-kef.de","num_choices":1}
{"level":"debug","ts":1732181249.0484028,"logger":"tls.handshake","msg":"default certificate selection results","identifier":"reitz-kef.de","subjects":["reitz-kef.de"],"managed":true,"issuer_key":"acme-v02.api.letsencrypt.org-directory","hash":"17147d6becf2c3da4fa4b4dbe5696a3e2a05a51552773ec6dbd789b65d51c49e"}
{"level":"debug","ts":1732181249.0485044,"logger":"tls.handshake","msg":"matched certificate in cache","remote_ip":"62.91.145.78","remote_port":"60968","subjects":["reitz-kef.de"],"managed":true,"expiration":1739792334,"hash":"17147d6becf2c3da4fa4b4dbe5696a3e2a05a51552773ec6dbd789b65d51c49e"}
{"level":"debug","ts":1732181249.0579464,"logger":"http.handlers.reverse_proxy","msg":"selected upstream","dial":"192.168.178.87:443","total_upstreams":1}
{"level":"debug","ts":1732181249.0772498,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"192.168.178.87:443","duration":0.018930772,"request":{"remote_ip":"62.91.145.78","remote_port":"60968","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"],"Sec-Fetch-Mode":["navigate"],"Priority":["u=0, i"],"Cache-Control":["max-age=0"],"X-Forwarded-For":["62.91.145.78"],"X-Forwarded-Host":["reitz-kef.de"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Ch-Ua":["\"Google Chrome\";v=\"131\", \"Chromium\";v=\"131\", \"Not_A Brand\";v=\"24\""],"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Ch-Ua-Mobile":["?0"],"Cookie":["REDACTED"],"X-Forwarded-Proto":["https"],"Sec-Fetch-Dest":["document"],"Sec-Fetch-Site":["none"],"Sec-Fetch-User":["?1"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Upgrade-Insecure-Requests":["1"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"error":"tls: failed to verify certificate: x509: cannot validate certificate for 192.168.178.87 because it doesn't contain any IP SANs"}
{"level":"error","ts":1732181249.0777676,"logger":"http.log.error","msg":"tls: failed to verify certificate: x509: cannot validate certificate for 192.168.178.87 because it doesn't contain any IP SANs","request":{"remote_ip":"62.91.145.78","remote_port":"60968","client_ip":"62.91.145.78","proto":"HTTP/2.0","method":"GET","host":"reitz-kef.de","uri":"/","headers":{"Sec-Ch-Ua":["\"Google Chrome\";v=\"131\", \"Chromium\";v=\"131\", \"Not_A Brand\";v=\"24\""],"Sec-Ch-Ua-Platform":["\"Windows\""],"Priority":["u=0, i"],"Cache-Control":["max-age=0"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Fetch-Mode":["navigate"],"Cookie":["REDACTED"],"Upgrade-Insecure-Requests":["1"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"],"Sec-Fetch-User":["?1"],"Sec-Fetch-Dest":["document"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Accept-Language":["de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Sec-Fetch-Site":["none"]},"tls":{"resumed":false,"version":772,"cipher_suite":4867,"proto":"h2","server_name":"reitz-kef.de"}},"duration":0.020073633,"status":502,"err_id":"xf1anmgnx","err_trace":"reverseproxy.statusError (reverseproxy.go:1269)"}
{"level":"debug","ts":1732181374.9208906,"logger":"events","msg":"event","name":"tls_get_certificate","id":"6ed32999-9984-41bb-8497-dc00ab95003f","origin":"tls","data":{"client_hello":{"CipherSuites":[49199,49195,49169,49159,49171,49161,49172,49162,5,47,53,49170,10],"ServerName":"","SupportedCurves":[23,24,25],"SupportedPoints":"AA==","SignatureSchemes":[1025,1027,513,515,1025,1281,1537],"SupportedProtos":null,"SupportedVersions":[771,770,769],"RemoteAddr":{"IP":"172.169.3.243","Port":34384,"Zone":""},"LocalAddr":{"IP":"172.18.0.2","Port":443,"Zone":""}}}}
{"level":"debug","ts":1732181374.9210818,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"172.18.0.2"}
{"level":"debug","ts":1732181374.9211779,"logger":"tls.handshake","msg":"no certificate matching TLS ClientHello","remote_ip":"172.169.3.243","remote_port":"34384","server_name":"","remote":"172.169.3.243:34384","identifier":"172.18.0.2","cipher_suites":[49199,49195,49169,49159,49171,49161,49172,49162,5,47,53,49170,10],"cert_cache_fill":0.0001,"load_or_obtain_if_necessary":true,"on_demand":false}
{"level":"debug","ts":1732181374.9217486,"logger":"http.stdlib","msg":"http: TLS handshake error from 172.169.3.243:34384: no certificate available for '172.18.0.2'"}
{"level":"debug","ts":1732181537.3054628,"logger":"http.stdlib","msg":"http: TLS handshake error from 104.164.173.208:57482: EOF"}
{"level":"debug","ts":1732181537.3094134,"logger":"http.stdlib","msg":"http: TLS handshake error from 104.164.173.13:40712: EOF"}
{"level":"debug","ts":1732181537.3110201,"logger":"http.stdlib","msg":"http: TLS handshake error from 104.164.173.49:10808: EOF"}
{"level":"debug","ts":1732181537.3124173,"logger":"http.stdlib","msg":"http: TLS handshake error from 104.164.173.215:40730: EOF"}
{"level":"debug","ts":1732181541.8609462,"logger":"http.stdlib","msg":"http: TLS handshake error from 104.164.173.150:31996: EOF"}
{"level":"debug","ts":1732181552.4238782,"logger":"http.stdlib","msg":"http: TLS handshake error from 154.28.229.232:37716: EOF"}
{"level":"debug","ts":1732181572.5660558,"logger":"http.stdlib","msg":"http: TLS handshake error from 172.168.157.145:39446: tls: first record does not look like a TLS handshake"}
{"level":"debug","ts":1732181700.1015542,"logger":"events","msg":"event","name":"tls_get_certificate","id":"6a12f77d-8d8d-4ac6-bee7-83c9b22ee14d","origin":"tls","data":{"client_hello":{"CipherSuites":[4865,4866,4867,49195,49196,52393,49199,49200,52392,49171,49172,156,157,47,53],"ServerName":"linuc.reitz-kef.de","SupportedCurves":[29,23,24],"SupportedPoints":"AA==","SignatureSchemes":[1027,2052,1025,1283,2053,1281,2054,1537,513],"SupportedProtos":["h2","http/1.1"],"SupportedVersions":[772,771,770,769],"RemoteAddr":{"IP":"62.91.145.78","Port":64149,"Zone":""},"LocalAddr":{"IP":"172.18.0.2","Port":443,"Zone":""}}}}
{"level":"debug","ts":1732181700.101711,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"linuc.reitz-kef.de"}
{"level":"debug","ts":1732181700.1017694,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"*.reitz-kef.de"}
{"level":"debug","ts":1732181700.1018062,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"*.*.de"}
{"level":"debug","ts":1732181700.1018357,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"*.*.*"}
{"level":"debug","ts":1732181700.1018977,"logger":"tls.handshake","msg":"no certificate matching TLS ClientHello","remote_ip":"62.91.145.78","remote_port":"64149","server_name":"linuc.reitz-kef.de","remote":"62.91.145.78:64149","identifier":"linuc.reitz-kef.de","cipher_suites":[4865,4866,4867,49195,49196,52393,49199,49200,52392,49171,49172,156,157,47,53],"cert_cache_fill":0.0001,"load_or_obtain_if_necessary":true,"on_demand":false}
{"level":"debug","ts":1732181700.1024356,"logger":"http.stdlib","msg":"http: TLS handshake error from 62.91.145.78:64149: no certificate available for 'linuc.reitz-kef.de'"}
{"level":"debug","ts":1732181752.509257,"logger":"events","msg":"event","name":"tls_get_certificate","id":"12924659-4577-47f4-8bf5-e8fa42dfc7d8","origin":"tls","data":{"client_hello":{"CipherSuites":[4865,4866,4867,49195,49196,52393,49199,49200,52392,49161,49162,49171,49172,156,157,47,53],"ServerName":"linuc.reitz-kef.de","SupportedCurves":[29,23,24],"SupportedPoints":"AA==","SignatureSchemes":[1027,2052,1025,1283,2053,1281,2054,1537,513],"SupportedProtos":null,"SupportedVersions":[772,771],"RemoteAddr":{"IP":"62.91.145.78","Port":63467,"Zone":""},"LocalAddr":{"IP":"172.18.0.2","Port":443,"Zone":""}}}}
{"level":"debug","ts":1732181752.5094128,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"linuc.reitz-kef.de"}
{"level":"debug","ts":1732181752.509463,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"*.reitz-kef.de"}
{"level":"debug","ts":1732181752.509496,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"*.*.de"}
{"level":"debug","ts":1732181752.5095289,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"*.*.*"}
{"level":"debug","ts":1732181752.5095925,"logger":"tls.handshake","msg":"no certificate matching TLS ClientHello","remote_ip":"62.91.145.78","remote_port":"63467","server_name":"linuc.reitz-kef.de","remote":"62.91.145.78:63467","identifier":"linuc.reitz-kef.de","cipher_suites":[4865,4866,4867,49195,49196,52393,49199,49200,52392,49161,49162,49171,49172,156,157,47,53],"cert_cache_fill":0.0001,"load_or_obtain_if_necessary":true,"on_demand":false}
{"level":"debug","ts":1732181752.510128,"logger":"http.stdlib","msg":"http: TLS handshake error from 62.91.145.78:63467: no certificate available for 'linuc.reitz-kef.de'"}
{"level":"debug","ts":1732181829.8838167,"logger":"events","msg":"event","name":"tls_get_certificate","id":"981b4244-221e-4a2c-b8cf-ee1152e4c389","origin":"tls","data":{"client_hello":{"CipherSuites":[4865,4866,4867,49195,49196,52393,49199,49200,52392,49161,49162,49171,49172,156,157,47,53],"ServerName":"linuc.jabv05jwz57is6vp.myfritz.net","SupportedCurves":[29,23,24],"SupportedPoints":"AA==","SignatureSchemes":[1027,2052,1025,1283,2053,1281,2054,1537,513],"SupportedProtos":null,"SupportedVersions":[772,771,770,769],"RemoteAddr":{"IP":"62.91.145.78","Port":61965,"Zone":""},"LocalAddr":{"IP":"172.18.0.2","Port":443,"Zone":""}}}}
{"level":"debug","ts":1732181829.8842852,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"linuc.jabv05jwz57is6vp.myfritz.net"}
{"level":"debug","ts":1732181829.8843546,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"*.jabv05jwz57is6vp.myfritz.net"}
{"level":"debug","ts":1732181829.8844295,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"*.*.myfritz.net"}
{"level":"debug","ts":1732181829.8844614,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"*.*.*.net"}
{"level":"debug","ts":1732181829.8844905,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"*.*.*.*"}
{"level":"debug","ts":1732181829.8845558,"logger":"tls.handshake","msg":"no certificate matching TLS ClientHello","remote_ip":"62.91.145.78","remote_port":"61965","server_name":"linuc.jabv05jwz57is6vp.myfritz.net","remote":"62.91.145.78:61965","identifier":"linuc.jabv05jwz57is6vp.myfritz.net","cipher_suites":[4865,4866,4867,49195,49196,52393,49199,49200,52392,49161,49162,49171,49172,156,157,47,53],"cert_cache_fill":0.0001,"load_or_obtain_if_necessary":true,"on_demand":false}
{"level":"debug","ts":1732181829.8851411,"logger":"http.stdlib","msg":"http: TLS handshake error from 62.91.145.78:61965: no certificate available for 'linuc.jabv05jwz57is6vp.myfritz.net'"}
{"level":"debug","ts":1732181857.5176678,"logger":"events","msg":"event","name":"tls_get_certificate","id":"4f948869-38cc-4308-8780-74881e7be089","origin":"tls","data":{"client_hello":{"CipherSuites":[52392,52393,52394,49196,49200,159,49325,49311,49188,49192,107,49162,49172,57,49327,49315,49287,49291,49277,49267,49271,196,136,49195,49199,158,49324,49310,49187,49191,103,49161,49171,51,49326,49314,49286,49290,49276,49266,49270,190,69,49160,49170,22,52396,52397,171,49319,49208,179,49206,145,49297,49307,49303,49323,170,49318,49207,178,49205,144,49296,49302,49306,49322,49204,143,157,49309,61,53,49202,49194,49167,49198,49190,49157,49313,49275,192,132,49293,49273,49289,49269,156,49308,60,47,49201,49193,49166,49197,49189,49156,49312,49274,186,65,49292,49272,49288,49268,10,49165,49155,52398,173,183,149,49299,49305,172,182,148,49298,49304,147,52395,169,49317,175,141,49295,49301,49321,168,49316,174,140,49294,49300,49320,139,255],"ServerName":"","SupportedCurves":[25,28,24,27,23,22,26,21,20,19,18],"SupportedPoints":"AA==","SignatureSchemes":[1539,1537,1283,1281,1027,1025,771,769,515,513],"SupportedProtos":null,"SupportedVersions":[771,770,769],"RemoteAddr":{"IP":"188.15.23.183","Port":59433,"Zone":""},"LocalAddr":{"IP":"172.18.0.2","Port":443,"Zone":""}}}}
{"level":"debug","ts":1732181857.5178254,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"172.18.0.2"}
{"level":"debug","ts":1732181857.5179024,"logger":"tls.handshake","msg":"no certificate matching TLS ClientHello","remote_ip":"188.15.23.183","remote_port":"59433","server_name":"","remote":"188.15.23.183:59433","identifier":"172.18.0.2","cipher_suites":[52392,52393,52394,49196,49200,159,49325,49311,49188,49192,107,49162,49172,57,49327,49315,49287,49291,49277,49267,49271,196,136,49195,49199,158,49324,49310,49187,49191,103,49161,49171,51,49326,49314,49286,49290,49276,49266,49270,190,69,49160,49170,22,52396,52397,171,49319,49208,179,49206,145,49297,49307,49303,49323,170,49318,49207,178,49205,144,49296,49302,49306,49322,49204,143,157,49309,61,53,49202,49194,49167,49198,49190,49157,49313,49275,192,132,49293,49273,49289,49269,156,49308,60,47,49201,49193,49166,49197,49189,49156,49312,49274,186,65,49292,49272,49288,49268,10,49165,49155,52398,173,183,149,49299,49305,172,182,148,49298,49304,147,52395,169,49317,175,141,49295,49301,49321,168,49316,174,140,49294,49300,49320,139,255],"cert_cache_fill":0.0001,"load_or_obtain_if_necessary":true,"on_demand":false}
{"level":"debug","ts":1732181857.5186143,"logger":"http.stdlib","msg":"http: TLS handshake error from 188.15.23.183:59433: no certificate available for '172.18.0.2'"}
{"level":"debug","ts":1732182338.4829643,"logger":"events","msg":"event","name":"tls_get_certificate","id":"5cf0710f-4674-4165-9d03-fd2d73aa39b4","origin":"tls","data":{"client_hello":{"CipherSuites":[19018,4865,4866,4867,49196,49195,52393,49200,49199,52392,49162,49161,49172,49171,157,156,53,47,49160,49170,10],"ServerName":"linuc.reitz-kef.de","SupportedCurves":[60138,29,23,24,25],"SupportedPoints":"AA==","SignatureSchemes":[1027,2052,1025,1283,515,2053,2053,1281,2054,1537,513],"SupportedProtos":["h2","http/1.1"],"SupportedVersions":[51914,772,771,770,769],"RemoteAddr":{"IP":"62.91.142.95","Port":57074,"Zone":""},"LocalAddr":{"IP":"172.18.0.2","Port":443,"Zone":""}}}}
{"level":"debug","ts":1732182338.4833739,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"linuc.reitz-kef.de"}
{"level":"debug","ts":1732182338.4834535,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"*.reitz-kef.de"}
{"level":"debug","ts":1732182338.483488,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"*.*.de"}
{"level":"debug","ts":1732182338.4835184,"logger":"tls.handshake","msg":"no matching certificates and no custom selection logic","identifier":"*.*.*"}
{"level":"debug","ts":1732182338.4835863,"logger":"tls.handshake","msg":"no certificate matching TLS ClientHello","remote_ip":"62.91.142.95","remote_port":"57074","server_name":"linuc.reitz-kef.de","remote":"62.91.142.95:57074","identifier":"linuc.reitz-kef.de","cipher_suites":[19018,4865,4866,4867,49196,49195,52393,49200,49199,52392,49162,49161,49172,49171,157,156,53,47,49160,49170,10],"cert_cache_fill":0.0001,"load_or_obtain_if_necessary":true,"on_demand":false}
{"level":"debug","ts":1732182338.4843233,"logger":"http.stdlib","msg":"http: TLS handshake error from 62.91.142.95:57074: no certificate available for 'linuc.reitz-kef.de'"}

I have read an article to switch of “tls_insecure_skip_verify”, but cannot oversee the consequences in security.

Cheers Uli

Whitestrake · November 21, 2024, 9:57am

HTTPS achieves two things:

Encrypt communications so other parties can’t snoop on the data in transit.
Give you a level of guarantee that you’ve connected to the server you meant to connect to, rather than an impostor.

By using tls_insecure_skip_verify you lose #2 entirely, but retain #1 (assuming the server is not an impostor that is sharing all your data onwards).

Within a LAN context, we don’t typically view this as a major concern at all. Certainly it is not worse than HTTP traffic, which I’d also generally consider acceptable within a LAN as long as it’s not business critical data or a very large/open LAN.

pampasadmin · November 21, 2024, 5:51pm

Hello again,
it could be so easy! I let caddy do the SSL stuff and have my applications behind the proxy without https enabled - and it works.

In my private LAN I do not have concerns to be hacked, therefore its ok for me. And I have no reason not to trust let’s encrypt.

Although it works, its not the end of my project. Now I want to get rid of the raspberry and get it all to work on the NUC, which already hosts the nextcloud. But first, I will enjoy a couple of days this intermediate solution.

Thanks a lot for your support!

Cheers Uli

pampasadmin · November 27, 2024, 9:06am

Hello,
the system is working, although the Raspberry 3 is the bottleneck in data transfer. What I really would like to point to, is the fact that encryption towards the internet is easy to set up, if its managed by caddy only. If encryption is active between caddy and the respective application (i. e. internal in the LAN) - it has led to difficulties - I was not able to solve it. On the other hand I’m fine with this solution. It would be helpful to point to this fact in any getting started hints.

Cheers
Uli