Hello.
I’m trying to retrieve a certificate using the acme protocol. I know this works because i already did one before setting up haproxy.
However, now i get this when committing.
vyos@vyos# commit
ACME certbot request failed for "support.domain.net"! failed to
run command: certbot certonly --non-interactive --config-dir
/config/auth/letsencrypt --cert-name support.domain.net
--standalone --agree-tos --no-eff-email --expand --server
https://acme-v02.api.letsencrypt.org/directory --email
[email protected] --key-type rsa --rsa-key-size 2048 --domains
support.domain.net --dry-run returned: Simulating a certificate
request for support.domain.net exit code: 1
[[pki]] failed
Commit failed
I think this is because the above command is trying to use standalone mode for certbot even though haproxy is running on port 80.
Here is my config
vyos@vyos# show load-balancing
reverse-proxy {
backend docs {
mode http
server docs {
address 10.x.x.21
port 80
}
}
service http {
listen-address 103.x.x.204
mode http
port 80
redirect-http-to-https
}
service https {
listen-address 103.x.x.204
mode http
port 443
rule 10 {
set {
redirect-location /certs/
}
url-path {
exact /.well-known/xxx
}
}
rule 25 {
domain-name docs.domain.net
set {
backend docs
}
}
ssl {
certificate docs.domain.net
}
}
}
vyos@vyos# show pki
certificate docs.domain.net {
acme {
domain-name docs.domain.net
email [email protected]
listen-address 103.x.x.204
}
}
+certificate support.domain.net {
+ acme {
+ domain-name support.domain.net
+ email [email protected]
+ }
+}
How can i tell acme to use webroot instead of standalone for the cert jobs?
Any thoughts anyone?