Hi, we have selfhosted forem. It is successfully deployed. But its not accepting any requests.
All docker containers are running:
$ foremctl status
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
6fc5253b94ea localhost/podman-pause:4.1.0-1653926608 14 minutes ago Up 14 minutes ago 0.0.0.0:80->80/tcp, 0.0.0.0:443->443/tcp 4719db0dfc7c-infra
e62dc8f1914b docker.io/library/redis:6.0.1 redis-server --ap... 14 minutes ago Up 14 minutes ago 0.0.0.0:80->80/tcp, 0.0.0.0:443->443/tcp forem-redis
7333b7a38b4d docker.io/darthsim/imgproxy:v2 imgproxy 14 minutes ago Up 14 minutes ago 0.0.0.0:80->80/tcp, 0.0.0.0:443->443/tcp forem-imgproxy
23e34507c6c0 docker.io/library/postgres:11 postgres 14 minutes ago Up 14 minutes ago 0.0.0.0:80->80/tcp, 0.0.0.0:443->443/tcp forem-postgresql
e83c37ad54f8 localhost/forem/forem:current bundle exec rails... 14 minutes ago Up 14 minutes ago 0.0.0.0:80->80/tcp, 0.0.0.0:443->443/tcp forem-rails
10ad91e23630 localhost/forem/forem:current bundle exec sidek... 14 minutes ago Up 14 minutes ago 0.0.0.0:80->80/tcp, 0.0.0.0:443->443/tcp forem-worker
5fc33f2c8640 quay.io/forem/openresty:1.17.8.2 /usr/bin/openrest... 13 minutes ago Up 13 minutes ago 0.0.0.0:80->80/tcp, 0.0.0.0:443->443/tcp forem-openresty
99c423caaec0 docker.io/library/traefik:2.3.0 traefik 9 minutes ago Up 9 minutes ago 0.0.0.0:80->80/tcp, 0.0.0.0:443->443/tcp forem-traefik
When we checked the status of traefik, it was showing Unable to obtain ACME certificate for domains
This is the output of the logs
forem-traefik.service - Forem Traefik Service
Loaded: loaded (/etc/systemd/system/forem-traefik.service; enabled; vendor preset: enabled)
Active: active (running) since Wed 2022-07-13 13:38:09 UTC; 6min ago
Process: 2337 ExecStartPre=/usr/bin/podman pull $TRAEFIK_CONTAINER_IMAGE (code=exited, status=0/SUCCESS)
Process: 2364 ExecStartPost=/usr/bin/chmod 0600 /opt/forem/configs/traefik/acme.json (code=exited, status=0/SUCCESS)
Main PID: 2355 (conmon)
Tasks: 2 (limit: 2209)
Memory: 1.2M
CPU: 229ms
CGroup: /machine.slice/machine-forem.slice/machine-forem-pod.slice/forem-traefik.service
└─ 2355 /usr/bin/conmon --api-version 1 -c 757e7b2a8018333d4ff3f3f0f979335cc568e32d371851fde99ed967a87c9042 -u 757e7b2a8018333d4ff3f3f0f979335cc568e32d371851fde99ed967a87c9042 -r /usr/bin/crun -b /var/lib/containers/storage/overlay-containers/757e7b2a8018333d4ff3f3f0f979335cc568e32d371851fde99ed967a87c9042/userdata -p /run/containers/storage/overlay-containers/757e7b2a8018333d4ff3f3f0f979335cc568e32d371851fde99ed967a87c9042/userdata/pidfile -n forem-traefik --exit-dir /run/libpod/exits --full-attach -s -l journald --log-level warning --runtime-arg --log-format=json --runtime-arg --log --runtime-arg=/run/containers/storage/overlay-containers/757e7b2a8018333d4ff3f3f0f979335cc568e32d371851fde99ed967a87c9042/userdata/oci-log --conmon-pidfile /run/containers/storage/overlay-containers/757e7b2a8018333d4ff3f3f0f979335cc568e32d371851fde99ed967a87c9042/userdata/conmon.pid --exit-command /usr/bin/podman --exit-command-arg --root --exit-command-arg /var/lib/containers/storage --exit-command-arg --runroot --exit-command-arg /run/containers/storage --exit-command-arg --log-level --exit-command-arg warning --exit-command-arg --cgroup-manager --exit-command-arg systemd --exit-command-arg --tmpdir --exit-command-arg /run/libpod --exit-command-arg --network-config-dir --exit-command-arg "" --exit-command-arg --network-backend --exit-command-arg netavark --exit-command-arg --volumepath --exit-command-arg /var/lib/containers/storage/volumes --exit-command-arg --runtime --exit-command-arg crun --exit-command-arg --storage-driver --exit-command-arg overlay --exit-command-arg --storage-opt --exit-command-arg overlay.mountopt=nodev,metacopy=on --exit-command-arg --events-backend --exit-command-arg journald --exit-command-arg container --exit-command-arg cleanup --exit-command-arg --rm --exit-command-arg 757e7b2a8018333d4ff3f3f0f979335cc568e32d371851fde99ed967a87c9042
Jul 13 13:38:11 www.hello.gary.tech forem-traefik[2355]: time="2022-07-13T13:38:11Z" level=debug msg="legolog: [INFO] [www.hello.gary.tech] acme: Obtaining bundled SAN certificate"
Jul 13 13:38:11 www.hello.gary.tech forem-traefik[2355]: time="2022-07-13T13:38:11Z" level=debug msg="legolog: [INFO] [www.hello.gary.tech] AuthURL: https://acme-v02.api.letsencrypt.org/acme/authz-v3/130113226486"
Jul 13 13:38:11 www.hello.gary.tech forem-traefik[2355]: time="2022-07-13T13:38:11Z" level=debug msg="legolog: [INFO] [www.hello.gary.tech] acme: Could not find solver for: tls-alpn-01"
Jul 13 13:38:11 www.hello.gary.tech forem-traefik[2355]: time="2022-07-13T13:38:11Z" level=debug msg="legolog: [INFO] [www.hello.gary.tech] acme: use http-01 solver"
Jul 13 13:38:11 www.hello.gary.tech forem-traefik[2355]: time="2022-07-13T13:38:11Z" level=debug msg="legolog: [INFO] [www.hello.gary.tech] acme: Trying to solve HTTP-01"
Jul 13 13:38:18 www.hello.gary.tech forem-traefik[2355]: time="2022-07-13T13:38:18Z" level=debug msg="legolog: [INFO] Deactivating auth: https://acme-v02.api.letsencrypt.org/acme/authz-v3/130113226486"
Jul 13 13:38:18 www.hello.gary.tech forem-traefik[2355]: time="2022-07-13T13:38:18Z" level=error msg="Unable to obtain ACME certificate for domains \"www.hello.gary.tech\": unable to generate a certificate for the domains [www.hello.gary.tech]: error: one or more domains had a problem:\n[www.hello.gary.tech] acme: error: 400 :: urn:ietf:params:acme:error:dns :: DNS problem: NXDOMAIN looking up A for www.hello.gary.tech - check that a DNS record exists for this domain; DNS problem: NXDOMAIN looking up AAAA for www.hello.gary.tech - check that a DNS record exists for this domain, url: \n" routerName=forem@file rule="Host(`www.hello.gary.tech`) && Method(`GET`, `POST`, `PUT`, `DELETE`, `PATCH`, `HEAD`)" providerName=forem.acme
Jul 13 13:39:47 www.hello.gary.tech forem-traefik[2355]: time="2022-07-13T13:39:47Z" level=debug msg="http: TLS handshake error from 212.102.58.164:34338: strict SNI enabled - No certificate found for domain: \"34.245.222.176\", closing connection"
Jul 13 13:40:21 www.hello.gary.tech forem-traefik[2355]: time="2022-07-13T13:40:21Z" level=debug msg="http: TLS handshake error from 212.102.58.164:51478: strict SNI enabled - No certificate found for domain: \"34.245.222.176\", closing connection"
Jul 13 13:41:58 www.hello.gary.tech forem-traefik[2355]: time="2022-07-13T13:41:58Z" level=debug msg="http: TLS handshake error from 164.92.64.200:48120: strict SNI enabled - No certificate found for domain: \"\", closing connection"
It would be great if we can get some suggestions or help here.
Thank You
Top comments (5)
Could you try installing it using dokku. Then there will be fewer things to watch. Only one known issue using that method. You can find its fix here
Though the problem I am seeing with your setup is with the domain hello.gary.tech not having any dns records.
Yes, the problem is with the dns records. Though there is DNS records, it says it does not exist.
I can't see anything from my side.
Sorry for that, had deleted the record recently. I will be adding it back again a bit later as i was occupied with some work related stuffs.
Hi @surgbc , As per your recommendation i tried installing forem with dokku. Currently im not able to successfully deploy it. I can see the following error during deployment.
It would be great if you can help me with it. I have not made any changes to the environment variables. Hence not sure what is the issue.
Also, the postgres docker container is running(
sudo docker ps).