demyx icon indicating copy to clipboard operation
demyx copied to clipboard
verified publisher icon demyxsh

404 page not found with traefik

Open nguyenrom opened this issue 3 years ago • 1 comments

Dear Demyx,

After fresh installation, I have updated DEMYX_HOST_TRAEFIK_DASHBOARD=true, but https://traefik.demo.domain.com/ return: 404 page not found

demyx log traefik -e

root@N1-ubuntu-s-1vcpu-1gb-sgp1-01:~# demyx log traefik -e
time="2022-10-14T03:09:51-07:00" level=info msg="Traefik version 2.9.1 built on 2022-10-03T14:22:13Z"
time="2022-10-14T03:09:51-07:00" level=info msg="\nStats collection is disabled.\nHelp us improve Traefik by turning this feature on :)\nMore details on: https://doc.traefik.io/traefik/contributing/data-collection/\n"
time="2022-10-14T03:09:51-07:00" level=info msg="Starting provider aggregator aggregator.ProviderAggregator"
time="2022-10-14T03:09:51-07:00" level=info msg="Starting provider *traefik.Provider"
time="2022-10-14T03:09:51-07:00" level=info msg="Starting provider *docker.Provider"
time="2022-10-14T03:09:51-07:00" level=info msg="Starting provider *acme.ChallengeTLSALPN"
time="2022-10-14T03:09:51-07:00" level=info msg="Starting provider *acme.Provider"
time="2022-10-14T03:09:51-07:00" level=info msg="Testing certificate renew..." ACME CA="https://acme-v02.api.letsencrypt.org/directory" providerName=demyx.acme
time="2022-10-14T03:09:51-07:00" level=info msg="Starting provider *acme.Provider"
time="2022-10-14T03:09:51-07:00" level=info msg="Testing certificate renew..." providerName=demyx-cf.acme ACME CA="https://acme-v02.api.letsencrypt.org/directory"
time="2022-10-14T03:19:51-07:00" level=error msg="Provider connection error unexpected EOF, retrying in 283.929757ms" providerName=docker
time="2022-10-14T03:28:09-07:00" level=info msg=Register... providerName=demyx.acme
time="2022-10-14T03:28:16-07:00" level=error msg="Unable to obtain ACME certificate for domains \"demo.domain.com,www.demo.domain.com\": unable to generate a certificate for the domains [demo.domain.com www.demo.domain.com]: error: one or more domains had a problem:\n[www.demo.domain.com] acme: error: 400 :: urn:ietf:params:acme:error:dns :: DNS problem: NXDOMAIN looking up A for www.demo.domain.com - check that a DNS record exists for this domain; DNS problem: NXDOMAIN looking up AAAA for www.demo.domain.com - check that a DNS record exists for this domain\n" rule="Host(`demo.domain.com`) || Host(`www.demo.domain.com`)" providerName=demyx.acme ACME CA="https://acme-v02.api.letsencrypt.org/directory" routerName=demodomaincloud-https@docker
time="2022-10-14T03:28:50-07:00" level=error msg="Unable to obtain ACME certificate for domains \"demo.domain.com,www.demo.domain.com\": unable to generate a certificate for the domains [demo.domain.com www.demo.domain.com]: error: one or more domains had a problem:\n[www.demo.domain.com] acme: error: 400 :: urn:ietf:params:acme:error:dns :: DNS problem: NXDOMAIN looking up A for www.demo.domain.com - check that a DNS record exists for this domain; DNS problem: NXDOMAIN looking up AAAA for www.demo.domain.com - check that a DNS record exists for this domain\n" rule="Host(`demo.domain.com`) || Host(`www.demo.domain.com`)" ACME CA="https://acme-v02.api.letsencrypt.org/directory" providerName=demyx.acme routerName=demodomaincloud-https@docker
time="2022-10-14T03:30:05-07:00" level=info msg="Traefik version 2.9.1 built on 2022-10-03T14:22:13Z"
time="2022-10-14T03:30:05-07:00" level=info msg="\nStats collection is disabled.\nHelp us improve Traefik by turning this feature on :)\nMore details on: https://doc.traefik.io/traefik/contributing/data-collection/\n"
time="2022-10-14T03:30:05-07:00" level=info msg="Starting provider aggregator aggregator.ProviderAggregator"
time="2022-10-14T03:30:05-07:00" level=info msg="Starting provider *traefik.Provider"
time="2022-10-14T03:30:05-07:00" level=info msg="Starting provider *docker.Provider"
time="2022-10-14T03:30:05-07:00" level=info msg="Starting provider *acme.ChallengeTLSALPN"
time="2022-10-14T03:30:05-07:00" level=info msg="Starting provider *acme.Provider"
time="2022-10-14T03:30:05-07:00" level=info msg="Testing certificate renew..." ACME CA="https://acme-v02.api.letsencrypt.org/directory" providerName=demyx.acme
time="2022-10-14T03:30:05-07:00" level=info msg="Starting provider *acme.Provider"
time="2022-10-14T03:30:05-07:00" level=info msg="Testing certificate renew..." ACME CA="https://acme-v02.api.letsencrypt.org/directory" providerName=demyx-cf.acme
time="2022-10-14T03:30:06-07:00" level=error msg="cannot parse CIDR whitelist [false]: parsing CIDR trusted IPs <nil>: invalid CIDR address: false" entryPointName=https routerName=traefik-https@docker
time="2022-10-14T03:30:09-07:00" level=error msg="Unable to obtain ACME certificate for domains \"traefik.demo.domain.com\": unable to generate a certificate for the domains [traefik.demo.domain.com]: error: one or more domains had a problem:\n[traefik.demo.domain.com] acme: error: 400 :: urn:ietf:params:acme:error:dns :: DNS problem: NXDOMAIN looking up A for traefik.demo.domain.com - check that a DNS record exists for this domain; DNS problem: NXDOMAIN looking up AAAA for traefik.demo.domain.com - check that a DNS record exists for this domain\n" routerName=traefik-https@docker rule="Host(`traefik.demo.domain.com`)" ACME CA="https://acme-v02.api.letsencrypt.org/directory" providerName=demyx.acme
time="2022-10-14T03:30:09-07:00" level=error msg="Unable to obtain ACME certificate for domains \"demo.domain.com,www.demo.domain.com\": unable to generate a certificate for the domains [demo.domain.com www.demo.domain.com]: error: one or more domains had a problem:\n[www.demo.domain.com] acme: error: 400 :: urn:ietf:params:acme:error:dns :: DNS problem: NXDOMAIN looking up A for www.demo.domain.com - check that a DNS record exists for this domain; DNS problem: NXDOMAIN looking up AAAA for www.demo.domain.com - check that a DNS record exists for this domain\n" providerName=demyx.acme ACME CA="https://acme-v02.api.letsencrypt.org/directory" routerName=demodomaincloud-https@docker rule="Host(`demo.domain.com`) || Host(`www.demo.domain.com`)"
time="2022-10-14T03:41:35-07:00" level=error msg="Provider connection error unexpected EOF, retrying in 467.240574ms" providerName=docker
time="2022-10-14T03:41:35-07:00" level=error msg="Failed to retrieve information of the docker client and server host: error during connect: Get \"http://demyx_socket:2375/v1.24/version\": dial tcp: lookup demyx_socket on 127.0.0.11:53: server misbehaving" providerName=docker
time="2022-10-14T03:41:35-07:00" level=error msg="Provider connection error error during connect: Get \"http://demyx_socket:2375/v1.24/version\": dial tcp: lookup demyx_socket on 127.0.0.11:53: server misbehaving, retrying in 1.124772047s" providerName=docker
time="2022-10-14T03:41:36-07:00" level=error msg="Failed to retrieve information of the docker client and server host: error during connect: Get \"http://demyx_socket:2375/v1.24/version\": dial tcp: lookup demyx_socket on 127.0.0.11:53: server misbehaving" providerName=docker
time="2022-10-14T03:41:36-07:00" level=error msg="Provider connection error error during connect: Get \"http://demyx_socket:2375/v1.24/version\": dial tcp: lookup demyx_socket on 127.0.0.11:53: server misbehaving, retrying in 1.038856983s" providerName=docker
time="2022-10-14T03:41:37-07:00" level=error msg="Failed to retrieve information of the docker client and server host: error during connect: Get \"http://demyx_socket:2375/v1.24/version\": dial tcp: lookup demyx_socket on 127.0.0.11:53: server misbehaving" providerName=docker
time="2022-10-14T03:41:37-07:00" level=error msg="Provider connection error error during connect: Get \"http://demyx_socket:2375/v1.24/version\": dial tcp: lookup demyx_socket on 127.0.0.11:53: server misbehaving, retrying in 1.193465675s" providerName=docker
time="2022-10-14T03:41:38-07:00" level=error msg="Failed to retrieve information of the docker client and server host: error during connect: Get \"http://demyx_socket:2375/v1.24/version\": dial tcp: lookup demyx_socket on 127.0.0.11:53: server misbehaving" providerName=docker
time="2022-10-14T03:41:38-07:00" level=error msg="Provider connection error error during connect: Get \"http://demyx_socket:2375/v1.24/version\": dial tcp: lookup demyx_socket on 127.0.0.11:53: server misbehaving, retrying in 1.329257945s" providerName=docker
time="2022-10-14T03:41:40-07:00" level=error msg="Failed to retrieve information of the docker client and server host: error during connect: Get \"http://demyx_socket:2375/v1.24/version\": dial tcp: lookup demyx_socket on 127.0.0.11:53: server misbehaving" providerName=docker
time="2022-10-14T03:41:40-07:00" level=error msg="Provider connection error error during connect: Get \"http://demyx_socket:2375/v1.24/version\": dial tcp: lookup demyx_socket on 127.0.0.11:53: server misbehaving, retrying in 2.204765398s" providerName=docker
time="2022-10-14T03:42:40-07:00" level=info msg="Traefik version 2.9.1 built on 2022-10-03T14:22:13Z"
time="2022-10-14T03:42:40-07:00" level=info msg="\nStats collection is disabled.\nHelp us improve Traefik by turning this feature on :)\nMore details on: https://doc.traefik.io/traefik/contributing/data-collection/\n"
time="2022-10-14T03:42:40-07:00" level=info msg="Starting provider aggregator aggregator.ProviderAggregator"
time="2022-10-14T03:42:40-07:00" level=info msg="Starting provider *traefik.Provider"
time="2022-10-14T03:42:40-07:00" level=info msg="Starting provider *docker.Provider"
time="2022-10-14T03:42:40-07:00" level=info msg="Starting provider *acme.ChallengeTLSALPN"
time="2022-10-14T03:42:40-07:00" level=info msg="Starting provider *acme.Provider"
time="2022-10-14T03:42:40-07:00" level=info msg="Testing certificate renew..." providerName=demyx.acme ACME CA="https://acme-v02.api.letsencrypt.org/directory"
time="2022-10-14T03:42:40-07:00" level=info msg="Starting provider *acme.Provider"
time="2022-10-14T03:42:40-07:00" level=info msg="Testing certificate renew..." ACME CA="https://acme-v02.api.letsencrypt.org/directory" providerName=demyx-cf.acme
time="2022-10-14T03:42:41-07:00" level=error msg="cannot parse CIDR whitelist [false]: parsing CIDR trusted IPs <nil>: invalid CIDR address: false" entryPointName=https routerName=traefik-https@docker
time="2022-10-14T03:42:45-07:00" level=error msg="Unable to obtain ACME certificate for domains \"demo.domain.com,www.demo.domain.com\": unable to generate a certificate for the domains [demo.domain.com www.demo.domain.com]: error: one or more domains had a problem:\n[www.demo.domain.com] acme: error: 400 :: urn:ietf:params:acme:error:dns :: DNS problem: NXDOMAIN looking up A for www.demo.domain.com - check that a DNS record exists for this domain; DNS problem: NXDOMAIN looking up AAAA for www.demo.domain.com - check that a DNS record exists for this domain\n" rule="Host(`demo.domain.com`) || Host(`www.demo.domain.com`)" providerName=demyx.acme ACME CA="https://acme-v02.api.letsencrypt.org/directory" routerName=demodomaincloud-https@docker
time="2022-10-14T03:42:59-07:00" level=error msg="cannot parse CIDR whitelist [false]: parsing CIDR trusted IPs <nil>: invalid CIDR address: false" entryPointName=https routerName=traefik-https@docker
time="2022-10-14T03:43:01-07:00" level=error msg="Unable to obtain ACME certificate for domains \"demo.domain.com,www.demo.domain.com\": unable to generate a certificate for the domains [demo.domain.com www.demo.domain.com]: error: one or more domains had a problem:\n[www.demo.domain.com] acme: error: 400 :: urn:ietf:params:acme:error:dns :: DNS problem: NXDOMAIN looking up A for www.demo.domain.com - check that a DNS record exists for this domain; DNS problem: NXDOMAIN looking up AAAA for www.demo.domain.com - check that a DNS record exists for this domain\n" rule="Host(`demo.domain.com`) || Host(`www.demo.domain.com`)" providerName=demyx.acme ACME CA="https://acme-v02.api.letsencrypt.org/directory" routerName=demodomaincloud-https@docker
time="2022-10-14T03:53:05-07:00" level=error msg="Provider connection error unexpected EOF, retrying in 666.509799ms" providerName=docker
time="2022-10-14T04:00:04-07:00" level=error msg="cannot parse CIDR whitelist [false]: parsing CIDR trusted IPs <nil>: invalid CIDR address: false" entryPointName=https routerName=traefik-https@docker
time="2022-10-14T04:00:05-07:00" level=error msg="Unable to obtain ACME certificate for domains \"demo.domain.com,www.demo.domain.com\": unable to generate a certificate for the domains [demo.domain.com www.demo.domain.com]: acme: error: 429 :: POST :: https://acme-v02.api.letsencrypt.org/acme/new-order :: urn:ietf:params:acme:error:rateLimited :: Error creating new order :: too many failed authorizations recently: see https://letsencrypt.org/docs/failed-validation-limit/" providerName=demyx.acme ACME CA="https://acme-v02.api.letsencrypt.org/directory" routerName=demodomaincloud-https@docker rule="Host(`demo.domain.com`) || Host(`www.demo.domain.com`)"
time="2022-10-14T04:00:24-07:00" level=error msg="cannot parse CIDR whitelist [false]: parsing CIDR trusted IPs <nil>: invalid CIDR address: false" entryPointName=https routerName=traefik-https@docker
time="2022-10-14T04:00:24-07:00" level=error msg="Unable to obtain ACME certificate for domains \"demo.domain.com,www.demo.domain.com\": unable to generate a certificate for the domains [demo.domain.com www.demo.domain.com]: acme: error: 429 :: POST :: https://acme-v02.api.letsencrypt.org/acme/new-order :: urn:ietf:params:acme:error:rateLimited :: Error creating new order :: too many failed authorizations recently: see https://letsencrypt.org/docs/failed-validation-limit/" providerName=demyx.acme ACME CA="https://acme-v02.api.letsencrypt.org/directory" rule="Host(`demo.domain.com`) || Host(`www.demo.domain.com`)" routerName=demodomaincloud-https@docker
time="2022-10-14T04:00:26-07:00" level=error msg="cannot parse CIDR whitelist [false]: parsing CIDR trusted IPs <nil>: invalid CIDR address: false" entryPointName=https routerName=traefik-https@docker
time="2022-10-14T04:00:27-07:00" level=error msg="Unable to obtain ACME certificate for domains \"demo.domain.com,www.demo.domain.com\": unable to generate a certificate for the domains [demo.domain.com www.demo.domain.com]: acme: error: 429 :: POST :: https://acme-v02.api.letsencrypt.org/acme/new-order :: urn:ietf:params:acme:error:rateLimited :: Error creating new order :: too many failed authorizations recently: see https://letsencrypt.org/docs/failed-validation-limit/" ACME CA="https://acme-v02.api.letsencrypt.org/directory" providerName=demyx.acme routerName=demodomaincloud-https@docker rule="Host(`demo.domain.com`) || Host(`www.demo.domain.com`)"
time="2022-10-14T04:01:53-07:00" level=info msg="Traefik version 2.9.1 built on 2022-10-03T14:22:13Z"
time="2022-10-14T04:01:53-07:00" level=info msg="\nStats collection is disabled.\nHelp us improve Traefik by turning this feature on :)\nMore details on: https://doc.traefik.io/traefik/contributing/data-collection/\n"
time="2022-10-14T04:01:53-07:00" level=info msg="Starting provider aggregator aggregator.ProviderAggregator"
time="2022-10-14T04:01:53-07:00" level=info msg="Starting provider *traefik.Provider"
time="2022-10-14T04:01:53-07:00" level=info msg="Starting provider *docker.Provider"
time="2022-10-14T04:01:53-07:00" level=info msg="Starting provider *acme.ChallengeTLSALPN"
time="2022-10-14T04:01:53-07:00" level=info msg="Starting provider *acme.Provider"
time="2022-10-14T04:01:53-07:00" level=info msg="Testing certificate renew..." providerName=demyx.acme ACME CA="https://acme-v02.api.letsencrypt.org/directory"
time="2022-10-14T04:01:53-07:00" level=info msg="Starting provider *acme.Provider"
time="2022-10-14T04:01:53-07:00" level=info msg="Testing certificate renew..." providerName=demyx-cf.acme ACME CA="https://acme-v02.api.letsencrypt.org/directory"
time="2022-10-14T04:01:54-07:00" level=error msg="cannot parse CIDR whitelist [false]: parsing CIDR trusted IPs <nil>: invalid CIDR address: false" routerName=traefik-https@docker entryPointName=https
time="2022-10-14T04:01:55-07:00" level=error msg="Unable to obtain ACME certificate for domains \"demo.domain.com,www.demo.domain.com\": unable to generate a certificate for the domains [demo.domain.com www.demo.domain.com]: acme: error: 429 :: POST :: https://acme-v02.api.letsencrypt.org/acme/new-order :: urn:ietf:params:acme:error:rateLimited :: Error creating new order :: too many failed authorizations recently: see https://letsencrypt.org/docs/failed-validation-limit/" providerName=demyx.acme ACME CA="https://acme-v02.api.letsencrypt.org/directory" routerName=demodomaincloud-https@docker rule="Host(`demo.domain.com`) || Host(`www.demo.domain.com`)"

I have other questions:

  1. Is this possible to use nginx without traefik?
  2. Turn off SLL by default? B/c in some case people add site before create subdomain (point domain to IP), it make generate SSL fail.
  3. Only install SSL for special domain, not for all. Ex: demyx run demo.domain.com » Install only for demo.domain.com or user can add more by manual.

Thank you so much

nguyenrom avatar Oct 14 '22 11:10 nguyenrom

Hi thanks for using Demyx.

time="2022-10-14T04:01:54-07:00" level=error msg="cannot parse CIDR whitelist [false]: parsing CIDR trusted IPs <nil>: invalid CIDR address: false" routerName=traefik-https@docker entryPointName=https

This line here is what's causing the 404 due to a bug where the entry DEMYX_HOST_IP in ~/.demyx on the host has to be an IP address or set DEMYX_HOST_TRAEFIK_DASHBOARD=false. This has been addressed in v1.4.0 which will be released soon. I would also set DEMYX_HOST_CODE=false for now until a new version comes out.

demyxco avatar Oct 14 '22 23:10 demyxco

Hi @demyxco ,

I have tried to configs for my site, but not success. So I'm looking forward to version 1.4, can you share your release date? About the other question, can you help me confirm it?

Thank you

nguyenrom avatar Oct 22 '22 09:10 nguyenrom

@nguyenrom I'm putting myself on a deadline for the release. So php7.4 will be EOL this coming November 28th, so a new version of demyx will be released before or by then. One of the key features is that SSL will be disabled by default.

demyxco avatar Nov 02 '22 05:11 demyxco

Hi there, sorry for the long long delay in response but the long awaited 1.4.0 is here. I will be closing this now but feel free to open another one.

demyxco avatar Sep 19 '23 12:09 demyxco