Unable to obtain ACME certificate for domains: Connection refused about nextcloud_on_docker HOT 5 OPEN

since this more a traefik problem I would advice to ask this question in the traefik forum. or?

from nextcloud_on_docker.

Hi Reiner, asked here since a fresh clone of this playbook produces the issue. Last time I cloned your repo was a year ago and it worked perfectly (same host, same server, same provision.) Traefik forum would probably point me back to here.

from nextcloud_on_docker.

nginx is not listening on ipv6. I stumbled across the same error. You can easily confirm this by entering the ipv6 address in your browser or run curl -v [< ipv6 >].

I am currently trying to figure out what went wrong and will post my results.

from nextcloud_on_docker.

Following up. I dug through the documentation and figured out that the following diff succeeds. @ReinerNippes if I submit a PR will you merge it?

$ git diff roles/docker_container/templates/traefik.yaml.j2
diff --git a/roles/docker_container/templates/traefik.yaml.j2 b/roles/docker_container/templates/traefik.yaml.j2
index 3e144d9..60e131d 100644
--- a/roles/docker_container/templates/traefik.yaml.j2
+++ b/roles/docker_container/templates/traefik.yaml.j2
@@ -37,7 +37,9 @@ certificatesResolvers:
     acme:
       email: "{{ ssl_cert_email }}"
       storage: 'acme.json'
-      tlsChallenge: {}
+      #tlsChallenge: {}
+      httpChallenge:
+        entryPoint: web
 {% endif %}
 {% if acme_provider is defined %}
       dnsChallenge: 

I don't remember exactly why it works, this was months ago. There are still some scary messages in Traefik debug logs, but NextCloud over TLS works fine.

from nextcloud_on_docker.

I would like to enable all three acme challenge methods.
https://doc.traefik.io/traefik/https/acme/#the-different-acme-challenges

Let me figure out how to make it easy for users how to setup the correct challenge method with ansible variables.

from nextcloud_on_docker.