Can't get cert to validate

General Docker
1

I know this isn’t the ideal situation because a couple things changed on me all at once but I can’t get SWAG to work anymore. My internet changed from DSL to fiber. I am using my same router so the settings should be the same however I no longer have the DSL modem. Also my Unraid server took a dump and I had to reload all my docker containers so as I rebuild I am having trouble getting this to work. Here is what I am seeing in the log file. I would appreciate any help as I am really struggling and I am no expert.

Some challenges have failed.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
chown: cannot dereference '/config/keys/letsencrypt': No such file or directory
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Some challenges have failed.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
ERROR: Cert does not exist! Please see the validation error above. The issue may be due to incorrect dns or port forwarding settings. Please fix your settings and recreate the container
[migrations] started
[migrations] 01-nginx-site-confs-default: skipped
[migrations] done
usermod: no changes
───────────────────────────────────────

      ██╗     ███████╗██╗ ██████╗
      ██║     ██╔════╝██║██╔═══██╗
      ██║     ███████╗██║██║   ██║
      ██║     ╚════██║██║██║   ██║
      ███████╗███████║██║╚██████╔╝
      ╚══════╝╚══════╝╚═╝ ╚═════╝

   Brought to you by linuxserver.io
───────────────────────────────────────

To support the app dev(s) visit:
Certbot: https://supporters.eff.org/donate/support-work-on-certbot

To support LSIO projects visit:
https://www.linuxserver.io/donate/

───────────────────────────────────────
GID/UID
───────────────────────────────────────

User UID:    99
User GID:    100
───────────────────────────────────────

using keys found in /config/keys
**** Permissions could not be set. This is probably because your volume mounts are remote or read-only. ****
**** The app may not work properly and we will not provide support for it. ****
Variables set:
PUID=99
PGID=100
TZ=America/New_York
URL=mgranger.com
SUBDOMAINS=nextcloud,emby,shinobi,vault,guacamole
EXTRA_DOMAINS=
ONLY_SUBDOMAINS=false
VALIDATION=http
CERTPROVIDER=
DNSPLUGIN=cloudflare
EMAIL=grangemd@gmail.com
STAGING=false

Using Let's Encrypt as the cert provider
SUBDOMAINS entered, processing
Sub-domains processed are: nextcloud.mgranger.com,emby.mgranger.com,shinobi.mgranger.com,vault.mgranger.com,guacamole.mgranger.com
E-mail address entered: grangemd@gmail.com
http validation is selected
Generating new certificate
Requesting a certificate for mgranger.com and 5 more domains

Certbot failed to authenticate some domains (authenticator: standalone). The Certificate Authority reported these problems:
  Domain: emby.mgranger.com
  Type:   connection
  Detail: XX.XXX.XX.XX: Fetching http://emby.mgranger.com/.well-known/acme-challenge/jMrLnTtO8p74WoRA4uA62sxfeyAhkjGvMF2FjndgcJ8: Timeout during connect (likely firewall problem)

  Domain: guacamole.mgranger.com
  Type:   connection
  Detail: XX.XXX.XX.XX: Fetching http://guacamole.mgranger.com/.well-known/acme-challenge/ksceEaVmtzILnq6qQ8Da1xZhs_2p7fb1hoo82t6Sx4k: Timeout during connect (likely firewall problem)

  Domain: mgranger.com
  Type:   connection
  Detail: XX.XXX.XX.XX: Fetching http://mgranger.com/.well-known/acme-challenge/WAktQJeR3B8UMtNV3j7hblkwt0m6EhEXBYT6UIPlcTY: Timeout during connect (likely firewall problem)

  Domain: nextcloud.mgranger.com
  Type:   connection
  Detail: XX.XXX.XX.XX: Fetching http://nextcloud.mgranger.com/.well-known/acme-challenge/YOAbcWH1Giz0DBpF1yqa0UQjyiR8RMzM730lrjrt0PM: Timeout during connect (likely firewall problem)

  Domain: shinobi.mgranger.com
  Type:   connection
  Detail: XX.XXX.XX.XX: Fetching http://shinobi.mgranger.com/.well-known/acme-challenge/65rUQkAh6gY5AejI34m3bxD1dlm50ZWG-qhPumntDdU: Timeout during connect (likely firewall problem)

  Domain: vault.mgranger.com
  Type:   connection
  Detail: XX.XXX.XX.XX: Fetching http://vault.mgranger.com/.well-known/acme-challenge/X4fN8FM7_yABIm5Z7gt_UOZHEGqQtcvPCCuMxkIdzag: Timeout during connect (likely firewall problem)

Hint: The Certificate Authority failed to download the challenge files from the temporary standalone webserver started by Certbot on port 80. Ensure that the listed domains point to this machine and that it can accept inbound connections from the internet.

ERROR: Cert does not exist! Please see the validation error above. The issue may be due to incorrect dns or port forwarding settings. Please fix your settings and recreate the container

** Press ANY KEY to close this window **
2

I didn’t read everything because im mobile and getting ready to leave, BUT i just wanted to say THANK YOU for calling them docker containers. It’s very rare for unraiders to use the proper terminology and I appreciate you for doing so.

3

Anyone have any ideas?

4

Letencrypt suggests you have firewalled or otherwise blocked wan connection on tcp/80 which should be dnatted to your docker host

5

Thanks for the response. So I had it hooked up and working when I was on DSL. When I switched over to fiber that is when I started to have the issue. I kept the same settings in my router so tcp/80 should be already passing this through. I am just struggling figuring out how to ge3t this working.

6

I have made a little progress today but got to this point and now I am stuck again…

Saving debug log to /var/log/letsencrypt/letsencrypt.log
No certificate found with name mgranger.com (expected /etc/letsencrypt/renewal/mgranger.com.conf).
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Unsafe permissions on credentials configuration file: /config/dns-conf/godaddy.ini
Error determining zone identifier for mgranger.com: 401 Client Error: Unauthorized for url: https://api.godaddy.com/v1/domains/mgranger.com.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
chown: cannot dereference '/config/keys/letsencrypt': No such file or directory
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Unsafe permissions on credentials configuration file: /config/dns-conf/godaddy.ini
**** Permissions could not be set. This is probably because your volume mounts are remote or read-only. ****
**** The app may not work properly and we will not provide support for it. ****
Variables set:
PUID=99
PGID=100
TZ=America/New_York
URL=mgranger.com
SUBDOMAINS=nextcloud,vault
EXTRA_DOMAINS=
ONLY_SUBDOMAINS=false
VALIDATION=dns
CERTPROVIDER=
DNSPLUGIN=godaddy
EMAIL=grangemd@gmail.com
STAGING=false

Different validation parameters entered than what was used before. Revoking and deleting existing certificate, and an updated one will be created
Using Let's Encrypt as the cert provider
SUBDOMAINS entered, processing
Sub-domains processed are: nextcloud.mgranger.com,vault.mgranger.com
E-mail address entered: grangemd@gmail.com
dns validation via godaddy plugin is selected
Generating new certificate
Account registered.
Requesting a certificate for mgranger.com and 2 more domains
ERROR: Cert does not exist! Please see the validation error above. Make sure you entered correct credentials into the /config/dns-conf/godaddy.ini file.
[migrations] started
[migrations] 01-nginx-site-confs-default: skipped
[migrations] done
usermod: no changes
───────────────────────────────────────

      ██╗     ███████╗██╗ ██████╗
      ██║     ██╔════╝██║██╔═══██╗
      ██║     ███████╗██║██║   ██║
      ██║     ╚════██║██║██║   ██║
      ███████╗███████║██║╚██████╔╝
      ╚══════╝╚══════╝╚═╝ ╚═════╝

   Brought to you by linuxserver.io
───────────────────────────────────────

To support the app dev(s) visit:
Certbot: https://supporters.eff.org/donate/support-work-on-certbot

To support LSIO projects visit:
https://www.linuxserver.io/donate/

───────────────────────────────────────
GID/UID
───────────────────────────────────────

User UID:    99
User GID:    100
───────────────────────────────────────

using keys found in /config/keys
**** Permissions could not be set. This is probably because your volume mounts are remote or read-only. ****
**** The app may not work properly and we will not provide support for it. ****
Variables set:
PUID=99
PGID=100
TZ=America/New_York
URL=mgranger.com
SUBDOMAINS=nextcloud,vault
EXTRA_DOMAINS=
ONLY_SUBDOMAINS=false
VALIDATION=dns
CERTPROVIDER=
DNSPLUGIN=godaddy
EMAIL=grangemd@gmail.com
STAGING=false

Using Let's Encrypt as the cert provider
SUBDOMAINS entered, processing
Sub-domains processed are: nextcloud.mgranger.com,vault.mgranger.com
E-mail address entered: grangemd@gmail.com
dns validation via godaddy plugin is selected
Generating new certificate
Requesting a certificate for mgranger.com and 2 more domains
Error determining zone identifier for nextcloud.mgranger.com: 404 Client Error: Not Found for url: https://api.godaddy.com/v1/domains/nextcloud.mgranger.com.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
ERROR: Cert does not exist! Please see the validation error above. Make sure you entered correct credentials into the /config/dns-conf/godaddy.ini file.
7

You need to resolve your volumes first, as stated in your logs we will not support the current setup. I suggest coming on discord for help