Dear all,
I just install Seafile in docker on debian 12.
Everything is OK with http
when I tried to change http to https with letsencrypt it failed
http from outside is open and forwarded
https from outside is open and forwarded
my docker-compose.yml fiel is
services:
db:
image: mariadb:10.11
container_name: seafile-mysql
environment:
- MYSQL_ROOT_PASSWORD=XXX # Requested, set the root’s password of MySQL service.
- MYSQL_LOG_CONSOLE=true
- MARIADB_AUTO_UPGRADE=1
volumes:
- /opt/seafile-mysql/db:/var/lib/mysql # Requested, specifies the path to MySQL data persistent store.
restart: unless-stopped
networks:
- seafile-net
memcached:
image: memcached:1.6.18
container_name: seafile-memcached
entrypoint: memcached -m 256
restart: unless-stopped
networks:
- seafile-net
seafile:
image: seafileltd/seafile-mc:latest
container_name: seafile
ports:
- “80:80”
- "443:443" # If https is enabled, cancel the comment.
volumes:
- /opt/seafile-data:/shared # Requested, specifies the path to Seafile data persistent store.
restart: unless-stopped
environment:
- DB_HOST=db
- DB_ROOT_PASSWD=XXX # Requested, the value shuold be root's password of MySQL service.
- TIME_ZONE=Europe/Paris # Optional, default is UTC. Should be uncomment and set to your local time zone.
- SEAFILE_ADMIN_EMAIL=informatique@toto.fr # Specifies Seafile admin user, default is 'me@example.com'.
- SEAFILE_ADMIN_PASSWORD=XXX # Specifies Seafile admin password, default is 'asecret'.
- SEAFILE_SERVER_LETSENCRYPT=TRUE # Whether to use https or not.
- SEAFILE_SERVER_HOSTNAME=partage.toto.fr # Specifies your host name if https is enabled.
depends_on:
- db
- memcached
networks:
- seafile-net
networks:
seafile-net:
log is :
…
…
nginx:
nginx version: nginx/1.24.0
built by gcc 11.2.0 (Ubuntu 11.2.0-19ubuntu1)
built with OpenSSL 3.0.2 15 Mar 2022
TLS SNI support enabled
configure arguments: --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --modules-p ath=/usr/lib/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/v ar/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/var /run/nginx.pid --lock-path=/var/run/nginx.lock --http-client-body-temp-path=/var /cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --ht tp-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/c ache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=ng inx --group=nginx --with-compat --with-file-aio --with-threads --with-http_addit ion_module --with-http_auth_request_module --with-http_dav_module --with-http_fl v_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp 4_module --with-http_random_index_module --with-http_realip_module --with-http_s ecure_link_module --with-http_slice_module --with-http_ssl_module --with-http_st ub_status_module --with-http_sub_module --with-http_v2_module --with-mail --with -mail_ssl_module --with-stream --with-stream_realip_module --with-stream_ssl_mod ule --with-stream_ssl_preread_module --with-cc-opt=‘-g -O2 -ffile-prefix-map=/da ta/builder/debuild/nginx-1.24.0/debian/debuild-base/nginx-1.24.0=. -flto=auto -f fat-lto-objects -flto=auto -ffat-lto-objects -fstack-protector-strong -Wformat - Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -fPIC’ --with-ld-opt=‘-Wl,-Bsymbo lic-functions -flto=auto -ffat-lto-objects -flto=auto -Wl,-z,relro -Wl,-z,now -W l,–as-needed -pie’
socat:
Traceback (most recent call last):
File “/scripts/start.py”, line 95, in
main()
File “/scripts/start.py”, line 51, in main
init_letsencrypt()
File “/scripts/bootstrap.py”, line 86, in init_letsencrypt
raise RuntimeError(‘Failed to generate ssl certificate for domain {0}’.forma t(domain))
RuntimeError: Failed to generate ssl certificate for domain partage .toto.fr
could you help me ?
I already changed SSL folder from CHMOD 750 to 755 as seen here with no succes