SSL Certs are not auto-renewing -> log error: "Another instance of Certbot is already running"

[maltokyo]

SSL Certs are not auto-renewing (for all of my domains).

So I went into the WebGUI and tried to manually renew the SSL Certificates

Manual renewal worked for one domain, and then from the second domain that had expired, when I choose "renew now" I got the error in a red banner in the webGUI just saying "Internal Error".

So, I checked logs and it contains the following error for all the domains that are not renewed:

"Another instance of Certbot is already running"

Could anyone help, who might have a permanent fix for this?

Full log below:

nginx_proxy_manager    | [5/12/2022] [8:35:50 AM] [SSL      ] › ℹ  info      Renewing Let'sEncrypt certificates for Cert #17: my.domain.com
nginx_proxy_manager    | [5/12/2022] [8:35:50 AM] [SSL      ] › ℹ  info      Command: certbot renew --force-renewal --config "/etc/letsencrypt.ini" --cert-name "npm-17" --preferred-challenges "dns,http" --no-random-sleep-on-renew --disable-hook-validation
nginx_proxy_manager    | [5/12/2022] [8:35:51 AM] [Express  ] › ⚠  warning   Command failed: certbot renew --force-renewal --config "/etc/letsencrypt.ini" --cert-name "npm-17" --preferred-challenges "dns,http" --no-random-sleep-on-renew --disable-hook-validation
nginx_proxy_manager    | Another instance of Certbot is already running.
nginx_proxy_manager    | Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /tmp/tmp0k76co9u/log or re-run Certbot with -v for more details.
nginx_proxy_manager    |

[source011]

+1

[maltokyo]

Would anyone have any insights?

[source011]

Would anyone have any insights?

I ended up doing the DNS challenge as a work around for now.

[maltokyo]

Thank you, will try that. Not sure how to go about it though, will dig around.

[mat-m]

Rolling back from 2.9.18 to 2.9.15 fixes it for me.

[flufftronix]

I had the same issue, running these inside the app container in 2.9.18 fixed it for me:

pip uninstall certbot
pip install certbot

[daominhsangvn]

I resolved the problem by this post https://community.letsencrypt.org/t/solved-another-instance-of-certbot-is-already-running/44690

Basically just find and remove all lockfile which lock the certbot

[EDIflyer]

Thanks @daominhsangvn - that did the trick for me! For those having issues with it not renewing when Force SSL is enabled then this PR fixes that too - https://github.com/NginxProxyManager/nginx-proxy-manager/pull/2038

[github-actions[bot]]

Issue is now considered stale. If you want to keep it open, please comment :+1:

[maltokyo]

Not stale