I’m trying to run Caddy as a service with systemd, following https://github.com/mholt/caddy/tree/master/dist/init/linux-systemd but I’m having a lot of trouble trying to make it work. Now if I run the service I get this error and I don’t know what is causing it. Started Caddy HTTP/2 web server. ca…

The log indicates that there are issues fetching certificates.

Is ping plorenzo.es == your_vm_ip?

[image] plorenzo: caddy[28100]: 2017/07/18 10:24:23 [plorenzo.es] failed to get certificate: [plorenzo.es] error presenting token: Could not start HTTP server This part says that the certificate requisition failed because Caddy couldn’t start a server to serve the challenge response. Missing…

If I run the command as my user, caddy works fine and I can access the website under https so I think is not the ip or dns. I may have found the problem, I ran: sudo -u www-data /usr/local/bin/caddy -log stdout -agree=true -email=email@email.com -conf=/etc/caddy/Caddyfile -root=/var/tmp to see i…

[image] plorenzo: I don’t understand why caddy is trying to make a folder in /var/www , as you can see in the Caddyfile the project I’m trying to serve is in the /home directory Caddy will put the .caddy folder in either $HOME or $CADDYPATH, if it’s trying to manage certificates. You’re runn…

Because journalctl does not have line breaks, I was missing info on the log, the complete line is: caddy[1356]: 2017/07/19 12:48:44 [plorenzo.es] failed to get certificate: [plorenzo.es] error presenting token: Could not start HTTP server for challenge -> listen tcp :80: bind: permission denied S…

What was the output from running setcap, exactly? It definitely looks like it didn’t take. That error is almost certainly a privileged port capability issue. You could also try un-commenting ;CapabilityBoundingSet=CAP_NET_BIND_SERVICE ;AmbientCapabilities=CAP_NET_BIND_SERVICE ;NoNewPrivileges=tru…

it didn’t have any output, it should have? I also tried that (version 232), but I got the following error and I didn’t know what it was so I commented it again systemd[1]: Network Service is not active. systemd[1]: Dependency failed for Wait for Network to be Configured. systemd[1]: systemd-networ…

Ahh, I was hoping that uncommenting those would resolve any capability issues… Unfortunately I’m not that great with systemd. All I know for sure is that it can’t get :80. If you can run it from the CLI fine and serve a site on :80, that means it’s not being taken by something else, so that basical…

Re: that capabilities failure: nobody has been able to solve it. I have traced the exact error message with strace, but unfortunately the message is not particularly verbose. Here is where I talk about it: Systemd and AmbientCapabilities: Invalid argument / Networking, Server, and Protection / Arch …

Caddy Community

Unable to run Caddy as a daemon

Help

show post in topic

Home
Categories
Guidelines
Terms of Service

Powered by Discourse, best viewed with JavaScript enabled