1. The problem I’m having:
Caddy is running (according to systemctl status caddy) but my website is not loading. There is an error message about the tls certificate in the caddy logs. running curl against my ip address and/or domain produces no output.
My VPN provider my domain name is pointing correctly to the nameservers etc
````dig cabincrewforyou.com```
;; ANSWER SECTION:
cabincrewforyou.com. 3584 IN A 94.130.26.101
;; ANSWER SECTION:
cabincrewforyou.com. 3584 IN A 94.130.26.101
I’m not sure if this is simply a tls issue or something on top of that.
2. Error messages and/or full log output:
journalctl -f -u caddy
Feb 14 20:49:46 ubuntu-2gb-nbg1-1 caddy[13366]: {"level":"info","ts":1707943786.2648246,"logger":"tls.obtain","msg":"obtaining certificate","identifier":"cabincrewforyou.com"}
Feb 14 20:49:47 ubuntu-2gb-nbg1-1 caddy[13366]: {"level":"info","ts":1707943787.1578243,"logger":"http.acme_client","msg":"trying to solve challenge","identifier":"cabincrewforyou.com","challenge_type":"http-01","ca":"https://acme-staging-v02.api.letsencrypt.org/directory"}
Feb 14 20:49:57 ubuntu-2gb-nbg1-1 caddy[13366]: {"level":"error","ts":1707943797.879355,"logger":"http.acme_client","msg":"challenge failed","identifier":"cabincrewforyou.com","challenge_type":"http-01","problem":{"type":"urn:ietf:params:acme:error:connection","title":"","detail":"94.130.26.101: Fetching http://cabincrewforyou.com/.well-known/acme-challenge/9fBreOLBK2TeA5I6QNCyTJW00Jl3vkuXTvuVthFNsic: Timeout during connect (likely firewall problem)","instance":"","subproblems":[]}}
Feb 14 20:49:57 ubuntu-2gb-nbg1-1 caddy[13366]: {"level":"error","ts":1707943797.8794103,"logger":"http.acme_client","msg":"validating authorization","identifier":"cabincrewforyou.com","problem":{"type":"urn:ietf:params:acme:error:connection","title":"","detail":"94.130.26.101: Fetching http://cabincrewforyou.com/.well-known/acme-challenge/9fBreOLBK2TeA5I6QNCyTJW00Jl3vkuXTvuVthFNsic: Timeout during connect (likely firewall problem)","instance":"","subproblems":[]},"order":"https://acme-staging-v02.api.letsencrypt.org/acme/order/136418433/14528647763","attempt":1,"max_attempts":3}
Feb 14 20:49:59 ubuntu-2gb-nbg1-1 caddy[13366]: {"level":"info","ts":1707943799.2601988,"logger":"http.acme_client","msg":"trying to solve challenge","identifier":"cabincrewforyou.com","challenge_type":"tls-alpn-01","ca":"https://acme-staging-v02.api.letsencrypt.org/directory"}
Feb 14 20:50:09 ubuntu-2gb-nbg1-1 caddy[13366]: {"level":"error","ts":1707943809.9532871,"logger":"http.acme_client","msg":"challenge failed","identifier":"cabincrewforyou.com","challenge_type":"tls-alpn-01","problem":{"type":"urn:ietf:params:acme:error:connection","title":"","detail":"94.130.26.101: Timeout during connect (likely firewall problem)","instance":"","subproblems":[]}}
Feb 14 20:50:09 ubuntu-2gb-nbg1-1 caddy[13366]: {"level":"error","ts":1707943809.9533417,"logger":"http.acme_client","msg":"validating authorization","identifier":"cabincrewforyou.com","problem":{"type":"urn:ietf:params:acme:error:connection","title":"","detail":"94.130.26.101: Timeout during connect (likely firewall problem)","instance":"","subproblems":[]},"order":"https://acme-staging-v02.api.letsencrypt.org/acme/order/136418433/14528650713","attempt":2,"max_attempts":3}
Feb 14 20:50:09 ubuntu-2gb-nbg1-1 caddy[13366]: {"level":"error","ts":1707943809.953381,"logger":"tls.obtain","msg":"could not get certificate from issuer","identifier":"cabincrewforyou.com","issuer":"acme-v02.api.letsencrypt.org-directory","error":"HTTP 400 urn:ietf:params:acme:error:connection - 94.130.26.101: Timeout during connect (likely firewall problem)"}
Feb 14 20:50:13 ubuntu-2gb-nbg1-1 caddy[13366]: {"level":"error","ts":1707943813.6351764,"logger":"tls.obtain","msg":"could not get certificate from issuer","identifier":"cabincrewforyou.com","issuer":"acme.zerossl.com-v2-DV90","error":"[cabincrewforyou.com] solving challenges: authz https://acme.zerossl.com/v2/DV90/authz/DB6QrlNfSFmd3YbWEtMVNg has unexpected status; order will fail: invalid (order=https://acme.zerossl.com/v2/DV90/order/jO3YlwYMw8Clh3o-laYNtA) (ca=https://acme.zerossl.com/v2/DV90)"}
Feb 14 20:50:13 ubuntu-2gb-nbg1-1 caddy[13366]: {"level":"error","ts":1707943813.6352618,"logger":"tls.obtain","msg":"will retry","error":"[cabincrewforyou.com] Obtain: [cabincrewforyou.com] solving challenges: authz https://acme.zerossl.com/v2/DV90/authz/DB6QrlNfSFmd3YbWEtMVNg has unexpected status; order will fail: invalid (order=https://acme.zerossl.com/v2/DV90/order/jO3YlwYMw8Clh3o-laYNtA) (ca=https://acme.zerossl.com/v2/DV90)","attempt":9,"retrying_in":1200,"elapsed":4139.908147831,"max_duration":2592000}
^[[C^[[C^[[C\ ubuntu-2gb-nbg1-1 caddy[13366]: {"level":"info","ts":1707943786.2648246,"logger":"tls.obtain","msg":"obtaining certificate","identifier":"cabincrewforyou.com"}
Feb 14 20:49:47 ubuntu-2gb-nbg1-1 caddy[13366]: {"level":"info","ts":1707943787.1578243,"logger":"http.acme_client","msg":"trying to solve challenge","identifier":"cabincrewforyou.com","challenge_type":"http-01","ca":"https://acme-staging-v02.api.letsencrypt.org/directory"}
Feb 14 20:49:57 ubuntu-2gb-nbg1-1 caddy[13366]: {"level":"error","ts":1707943797.879355,"logger":"http.acme_client","msg":"challenge failed","identifier":"cabincrewforyou.com","challenge_type":"http-01","problem":{"type":"urn:ietf:params:acme:error:connection","title":"","detail":"94.130.26.101: Fetching http://cabincrewforyou.com/.well-known/acme-challenge/9fBreOLBK2TeA5I6QNCyTJW00Jl3vkuXTvuVthFNsic: Timeout during connect (likely firewall problem)","instance":"","subproblems":[]}}
Feb 14 20:49:57 ubuntu-2gb-nbg1-1 caddy[13366]: {"level":"error","ts":1707943797.8794103,"logger":"http.acme_client","msg":"validating authorization","identifier":"cabincrewforyou.com","problem":{"type":"urn:ietf:params:acme:error:connection","title":"","detail":"94.130.26.101: Fetching http://cabincrewforyou.com/.well-known/acme-challenge/9fBreOLBK2TeA5I6QNCyTJW00Jl3vkuXTvuVthFNsic: Timeout during connect (likely firewall problem)","instance":"","subproblems":[]},"order":"https://acme-staging-v02.api.letsencrypt.org/acme/order/136418433/14528647763","attempt":1,"max_attempts":3}
Feb 14 20:49:59 ubuntu-2gb-nbg1-1 caddy[13366]: {"level":"info","ts":1707943799.2601988,"logger":"http.acme_client","msg":"trying to solve challenge","identifier":"cabincrewforyou.com","challenge_type":"tls-alpn-01","ca":"https://acme-staging-v02.api.letsencrypt.org/directory"}
Feb 14 20:50:09 ubuntu-2gb-nbg1-1 caddy[13366]: {"level":"error","ts":1707943809.9532871,"logger":"http.acme_client","msg":"challenge failed","identifier":"cabincrewforyou.com","challenge_type":"tls-alpn-01","problem":{"type":"urn:ietf:params:acme:error:connection","title":"","detail":"94.130.26.101: Timeout during connect (likely firewall problem)","instance":"","subproblems":[]}}
Feb 14 20:50:09 ubuntu-2gb-nbg1-1 caddy[13366]: {"level":"error","ts":1707943809.9533417,"logger":"http.acme_client","msg":"validating authorization","identifier":"cabincrewforyou.com","problem":{"type":"urn:ietf:params:acme:error:connection","title":"","detail":"94.130.26.101: Timeout during connect (likely firewall problem)","instance":"","subproblems":[]},"order":"https://acme-staging-v02.api.letsencrypt.org/acme/order/136418433/14528650713","attempt":2,"max_attempts":3}
Feb 14 20:50:09 ubuntu-2gb-nbg1-1 caddy[13366]: {"level":"error","ts":1707943809.953381,"logger":"tls.obtain","msg":"could not get certificate from issuer","identifier":"cabincrewforyou.com","issuer":"acme-v02.api.letsencrypt.org-directory","error":"HTTP 400 urn:ietf:params:acme:error:connection - 94.130.26.101: Timeout during connect (likely firewall problem)"}
Feb 14 20:50:13 ubuntu-2gb-nbg1-1 caddy[13366]: {"level":"error","ts":1707943813.6351764,"logger":"tls.obtain","msg":"could not get certificate from issuer","identifier":"cabincrewforyou.com","issuer":"acme.zerossl.com-v2-DV90","error":"[cabincrewforyou.com] solving challenges: authz https://acme.zerossl.com/v2/DV90/authz/DB6QrlNfSFmd3YbWEtMVNg has unexpected status; order will fail: invalid (order=https://acme.zerossl.com/v2/DV90/order/jO3YlwYMw8Clh3o-laYNtA) (ca=https://acme.zerossl.com/v2/DV90)"}
Feb 14 20:50:13 ubuntu-2gb-nbg1-1 caddy[13366]: {"level":"error","ts":1707943813.6352618,"logger":"tls.obtain","msg":"will retry","error":"[cabincrewforyou.com] Obtain: [cabincrewforyou.com] solving challenges: authz https://acme.zerossl.com/v2/DV90/authz/DB6QrlNfSFmd3YbWEtMVNg has unexpected status; order will fail: invalid (order=https://acme.zerossl.com/v2/DV90/order/jO3YlwYMw8Clh3o-laYNtA) (ca=https://acme.zerossl.com/v2/DV90)","attempt":9,"retrying_in
● caddy.service - Caddy
Loaded: loaded (/etc/systemd/system/caddy.service; enabled; vendor preset: enabled)
Active: active (running) since Tue 2024-02-13 13:37:29 UTC; 1 day 7h ago
Docs: https://caddyserver.com/docs/
Process: 22546 ExecReload=/usr/bin/caddy reload --config /etc/caddy/Caddyfile --force (code=exited, status=0/S>
Main PID: 13366 (caddy)
Tasks: 8 (limit: 2244)
Memory: 10.8M
CPU: 15.227s
CGroup: /system.slice/caddy.service
└─13366 /usr/bin/caddy run --environ --config /etc/caddy/Caddyfile
3. Caddy version:
v2.7.6 h1:w0NymbG2m9PcvKWsrXO6EEkY9Ru4FJK8uQbYcev1p3A=
4. How I installed and ran Caddy:
I followed the instructions for ubuntu on the caddy documentation page
a. System environment:
ubuntu
b. Command:
journalctl -f -u caddy
systemctl status caddy
I have also been running `curl cabincrewforyou.com` and there is no output
c. Service/unit/compose file:
PASTE OVER THIS, BETWEEN THE ``` LINES.
Please use the preview pane to ensure it looks nice.
d. My complete Caddy config:
{
servers {
metrics
}
}
cabincrewforyou.com {
# Set this path to your site's directory.
root * /var/www/html
# Enable the static file server.
file_server
# Another common task is to set up a reverse proxy:
# reverse_proxy localhost:8080
# Or serve a PHP site through php-fpm:
# php_fastcgi localhost:9000
}
did you reload Caddy afterwards?