{"action":"created","issue":{"url":"https://api.github.com/repos/mailcow/mailcow-dockerized/issues/550","repository_url":"https://api.github.com/repos/mailcow/mailcow-dockerized","labels_url":"https://api.github.com/repos/mailcow/mailcow-dockerized/issues/550/labels{/name}","comments_url":"https://api.github.com/repos/mailcow/mailcow-dockerized/issues/550/comments","events_url":"https://api.github.com/repos/mailcow/mailcow-dockerized/issues/550/events","html_url":"https://github.com/mailcow/mailcow-dockerized/issues/550","id":254991542,"number":550,"title":"Let's encrypt certificate cannot be renewed","user":{"login":"SEWADE","id":31615609,"avatar_url":"https://avatars3.githubusercontent.com/u/31615609?v=4","gravatar_id":"","url":"https://api.github.com/users/SEWADE","html_url":"https://github.com/SEWADE","followers_url":"https://api.github.com/users/SEWADE/followers","following_url":"https://api.github.com/users/SEWADE/following{/other_user}","gists_url":"https://api.github.com/users/SEWADE/gists{/gist_id}","starred_url":"https://api.github.com/users/SEWADE/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/SEWADE/subscriptions","organizations_url":"https://api.github.com/users/SEWADE/orgs","repos_url":"https://api.github.com/users/SEWADE/repos","events_url":"https://api.github.com/users/SEWADE/events{/privacy}","received_events_url":"https://api.github.com/users/SEWADE/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":9,"created_at":"2017-09-04T09:54:13Z","updated_at":"2017-10-05T11:25:34Z","closed_at":null,"author_association":"NONE","body":"Hi,\r\n\r\nI have a problem with renewing of the Let's encrypt certificate.\r\nI think the problem is that port 80 does not work, but dokumentations says \"mailcow must be available on port 80 for the acme-client to work\". Unfortunately, I do not know why this is so.\r\nMaybe someone can help me solve the problem.\r\n\r\nmailcow.conf:\r\n\r\n``` \r\n# ------------------------------\r\n# mailcow web ui configuration\r\n# ------------------------------\r\n# example.org is _not_ a valid hostname, use a fqdn here.\r\n# Default admin user is \"***\"\r\n# Default password is \"***\"\r\nMAILCOW_HOSTNAME=mail.system-server.de\r\n# ------------------------------\r\n# SQL database configuration\r\n# ------------------------------\r\nDBNAME=***\r\nDBUSER=***\r\n# Please use long, random alphanumeric strings (A-Za-z0-9)\r\nDBPASS=**********************\r\nDBROOT=**********************\r\n# ------------------------------\r\n# HTTP/S Bindings\r\n# ------------------------------\r\n# You should use HTTPS, but in case of SSL offloaded reverse proxies:\r\nHTTP_PORT=8080\r\nHTTP_BIND=0.0.0.0\r\nHTTPS_PORT=443\r\nHTTPS_BIND=0.0.0.0\r\n# ------------------------------\r\n# Other bindings\r\n# ------------------------------\r\n# You should leave that alone\r\n# Format: 11.22.33.44:25 or 0.0.0.0:465 etc.\r\n# Do _not_ use IP:PORT in HTTPS_BIND or HTTPS_PORT\r\nSMTP_PORT=25\r\nSMTPS_PORT=465\r\nSUBMISSION_PORT=587\r\nIMAP_PORT=143\r\nIMAPS_PORT=993\r\nPOP_PORT=110\r\nPOPS_PORT=995\r\nSIEVE_PORT=4190\r\n# Your timezone\r\nTZ=Europe/Berlin\r\nSKIP_LETS_ENCRYPT=n\r\nSKIP_CLAMD=y\r\nSKIP_IP_CHECK=y\r\nSKIP_FAIL2BAN=n\r\nADDITIONAL_SAN=autoconfig.system-server.de,autodiscover.system-server.de\r\nDOVEADM_PORT=127.0.0.1:19991\r\n```\r\nsite.conf\r\n```\r\nproxy_cache_path /tmp levels=1:2 keys_zone=sogo:10m inactive=24h  max_size=1g;\r\nmap $http_x_forwarded_proto $client_req_scheme {\r\n     default $scheme;\r\n     https https;\r\n}\r\nserver {\r\n   server_name webmail.system-server.de;\r\n   return 301 $scheme://mail.system-server.de/SOGo$request_uri;\r\n   rewrite ^/sogo /SOGo/ redirect;\r\n}\r\nserver {\r\n  include /etc/nginx/conf.d/listen_ssl.active;\r\n  include /etc/nginx/mime.types;\r\n  charset utf-8;\r\n  override_charset on;\r\n  ssl on;\r\n  ssl_certificate /etc/ssl/mail/cert.pem;\r\n  ssl_certificate_key /etc/ssl/mail/key.pem;\r\n  ssl_protocols TLSv1 TLSv1.1 TLSv1.2;\r\n  ssl_prefer_server_ciphers on;\r\n  ssl_ciphers 'EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA256:EECDH:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:kEDH:CAMELLIA128-SHA:AES128-SHA';\r\n  add_header Strict-Transport-Security \"max-age=15768000; includeSubDomains\";\r\n  ssl_ecdh_curve secp384r1;\r\n  index index.php index.html;\r\n  include /etc/nginx/conf.d/server_name.active;\r\n  error_log  /var/log/nginx/error.log;\r\n  access_log /var/log/nginx/access.log;\r\n  absolute_redirect off;\r\n  root /web;\r\n\r\n  location ~ ^/api/v1/(.*)$ {\r\n    try_files $uri $uri/ /json_api.php?query=$1;\r\n  }\r\n\r\n  location ^~ /.well-known/acme-challenge/ {\r\n    allow all;\r\n    default_type \"text/plain\";\r\n  }\r\n\r\n  # If behind reverse proxy, forwards the correct IP\r\n  set_real_ip_from 172.22.1.1;\r\n  real_ip_header X-Forwarded-For;\r\n  real_ip_recursive on;\r\n\r\n  rewrite ^/.well-known/caldav$ /SOGo/dav/ permanent;\r\n  rewrite ^/.well-known/carddav$ /SOGo/dav/ permanent;\r\n\r\n  location ^~ /principals {\r\n\treturn 301 /SOGo/dav;\r\n  }\r\n\r\n  location ~ \\.php$ {\r\n    try_files $uri =404;\r\n    fastcgi_split_path_info ^(.+\\.php)(/.+)$;\r\n    fastcgi_pass phpfpm:9000;\r\n    fastcgi_index index.php;\r\n    include /etc/nginx/fastcgi_params;\r\n    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;\r\n    fastcgi_param PATH_INFO $fastcgi_path_info;\r\n    fastcgi_param PHP_VALUE \"max_execution_time = 1200\r\n                             max_input_time = 1200\r\n                             memory_limit = 64M\";\r\n    fastcgi_read_timeout 1200;\r\n  }\r\n\r\n  location /rspamd/ {\r\n    proxy_pass       http://172.22.1.253:11334/;\r\n    proxy_set_header Host      $http_host;\r\n    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\r\n    proxy_set_header X-Real-IP $remote_addr;\r\n    proxy_redirect off;\r\n  }\r\n\r\n  location ~* ^/Autodiscover/Autodiscover.xml {\r\n    fastcgi_split_path_info ^(.+\\.php)(/.+)$;\r\n    fastcgi_pass phpfpm:9000;\r\n    include /etc/nginx/fastcgi_params;\r\n    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;\r\n    try_files /autodiscover.php =404;\r\n  }\r\n\r\n  location ~ /(?:m|M)ail/(?:c|C)onfig-v1.1.xml {\r\n    fastcgi_split_path_info ^(.+\\.php)(/.+)$;\r\n    fastcgi_pass phpfpm:9000;\r\n    include /etc/nginx/fastcgi_params;\r\n    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;\r\n    try_files /autoconfig.php =404;\r\n  }\r\n\r\n  location ^~ /Microsoft-Server-ActiveSync {\r\n    proxy_pass http://172.22.1.252:20000/SOGo/Microsoft-Server-ActiveSync;\r\n    proxy_connect_timeout 1000;\r\n    proxy_next_upstream timeout error;\r\n    proxy_send_timeout 1000;\r\n    proxy_read_timeout 1000;\r\n    proxy_buffer_size 8k;\r\n    proxy_buffers 4 32k;\r\n    proxy_temp_file_write_size 64k;\r\n    proxy_busy_buffers_size 64k;\r\n    proxy_set_header X-Real-IP $remote_addr;\r\n    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\r\n    proxy_set_header Host $http_host;\r\n    proxy_set_header x-webobjects-server-protocol HTTP/1.0;\r\n    proxy_set_header x-webobjects-remote-host $remote_addr;\r\n    proxy_set_header x-webobjects-server-name $server_name;\r\n    proxy_set_header x-webobjects-server-url $client_req_scheme://$http_host;\r\n    proxy_set_header x-webobjects-server-port $server_port;\r\n    client_body_buffer_size 128k;\r\n    client_max_body_size 100m;\r\n  }\r\n\r\n  location ^~ /SOGo {\r\n    proxy_pass http://172.22.1.252:20000;\r\n    proxy_set_header X-Real-IP $remote_addr;\r\n    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\r\n    proxy_set_header Host $http_host;\r\n    proxy_set_header x-webobjects-server-protocol HTTP/1.0;\r\n    proxy_set_header x-webobjects-remote-host $remote_addr;\r\n    proxy_set_header x-webobjects-server-name $server_name;\r\n    proxy_set_header x-webobjects-server-url $client_req_scheme://$http_host;\r\n    proxy_set_header x-webobjects-server-port $server_port;\r\n    client_body_buffer_size 128k;\r\n    client_max_body_size 100m;\r\n    break;\r\n  }\r\n\r\n  location /SOGo.woa/WebServerResources/ {\r\n    proxy_pass http://172.22.1.252:9192/WebServerResources/;\r\n    proxy_set_header Host $http_host;\r\n    proxy_cache sogo;\r\n    proxy_cache_valid 200 1d;\r\n    proxy_cache_use_stale error timeout invalid_header updating http_500 http_502 http_503 http_504;\r\n    #alias /usr/lib/GNUstep/SOGo/WebServerResources/;\r\n    allow all;\r\n  }\r\n\r\n  location /.woa/WebServerResources/ {\r\n    proxy_pass http://172.22.1.252:9192/WebServerResources/;\r\n    proxy_set_header Host $http_host;\r\n    proxy_cache sogo;\r\n    proxy_cache_valid 200 1d;\r\n    proxy_cache_use_stale error timeout invalid_header updating http_500 http_502 http_503 http_504;\r\n    #alias /usr/lib/GNUstep/SOGo/WebServerResources/;\r\n    allow all;\r\n  }\r\n\r\n  location /SOGo/WebServerResources/ {\r\n    proxy_pass http://172.22.1.252:9192/WebServerResources/;\r\n    proxy_set_header Host $http_host;\r\n    proxy_cache sogo;\r\n    proxy_cache_valid 200 1d;\r\n    proxy_cache_use_stale error timeout invalid_header updating http_500 http_502 http_503 http_504;\r\n    #alias /usr/lib/GNUstep/SOGo/WebServerResources/;\r\n    allow all;\r\n  }\r\n\r\n  location (^/SOGo/so/ControlPanel/Products/[^/]*UI/Resources/.*\\.(jpg|png|gif|css|js)$ {\r\n    proxy_pass http://172.22.1.252:9192/$1.SOGo/Resources/$2;\r\n    proxy_set_header Host $http_host;\r\n    proxy_cache sogo;\r\n    proxy_cache_valid 200 1d;\r\n    proxy_cache_use_stale error timeout invalid_header updating http_500 http_502 http_503 http_504;\r\n    #alias /usr/lib/GNUstep/SOGo/$1.SOGo/Resources/$2;\r\n  }\r\n}\r\nserver {\r\n  include /etc/nginx/conf.d/listen_plain.active;\r\n  include /etc/nginx/mime.types;\r\n  charset utf-8;\r\n  override_charset on;\r\n  index index.php index.html;\r\n  include /etc/nginx/conf.d/server_name.active;\r\n  error_log  /var/log/nginx/error.log;\r\n  access_log /var/log/nginx/access.log;\r\n  absolute_redirect off;\r\n  root /web;\r\n\r\n  location ~ ^/api/v1/(.*)$ {\r\n    try_files $uri $uri/ /json_api.php?query=$1;\r\n  }\r\n\r\n  location ^~ /.well-known/acme-challenge/ {\r\n    allow all;\r\n    default_type \"text/plain\";\r\n  }\r\n\r\n  # If behind reverse proxy, forwards the correct IP\r\n  set_real_ip_from 172.22.1.1;\r\n  real_ip_header X-Forwarded-For;\r\n  real_ip_recursive on;\r\n\r\n  rewrite ^/.well-known/caldav$ /SOGo/dav/ permanent;\r\n  rewrite ^/.well-known/carddav$ /SOGo/dav/ permanent;\r\n\r\n  location ^~ /principals {\r\n    return 301 /SOGo/dav;\r\n  }\r\n\r\n  location ~ \\.php$ {\r\n    try_files $uri =404;\r\n    fastcgi_split_path_info ^(.+\\.php)(/.+)$;\r\n    fastcgi_pass phpfpm:9000;\r\n    fastcgi_index index.php;\r\n    include /etc/nginx/fastcgi_params;\r\n    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;\r\n    fastcgi_param PATH_INFO $fastcgi_path_info;\r\n    fastcgi_param PHP_VALUE \"max_execution_time = 1200\r\n                             max_input_time = 1200\r\n                             memory_limit = 64M\";\r\n    fastcgi_read_timeout 1200;\r\n  }\r\n\r\n  location /rspamd/ {\r\n    proxy_pass       http://172.22.1.253:11334/;\r\n    proxy_set_header Host      $http_host;\r\n    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\r\n    proxy_set_header X-Real-IP $remote_addr;\r\n    proxy_redirect off;\r\n  }\r\n\r\n  location ~* ^/Autodiscover/Autodiscover.xml {\r\n    fastcgi_split_path_info ^(.+\\.php)(/.+)$;\r\n    fastcgi_pass phpfpm:9000;\r\n    include /etc/nginx/fastcgi_params;\r\n    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;\r\n    try_files /autodiscover.php =404;\r\n  }\r\n\r\n  location ~ /(?:m|M)ail/(?:c|C)onfig-v1.1.xml {\r\n    fastcgi_split_path_info ^(.+\\.php)(/.+)$;\r\n    fastcgi_pass phpfpm:9000;\r\n    include /etc/nginx/fastcgi_params;\r\n    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;\r\n    try_files /autoconfig.php =404;\r\n  }\r\n\r\n  location ^~ /Microsoft-Server-ActiveSync {\r\n    proxy_pass http://172.22.1.252:20000/SOGo/Microsoft-Server-ActiveSync;\r\n    proxy_connect_timeout 1000;\r\n    proxy_next_upstream timeout error;\r\n    proxy_send_timeout 1000;\r\n    proxy_read_timeout 1000;\r\n    proxy_buffer_size 8k;\r\n    proxy_buffers 4 32k;\r\n    proxy_temp_file_write_size 64k;\r\n    proxy_busy_buffers_size 64k;\r\n    proxy_set_header X-Real-IP $remote_addr;\r\n    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\r\n    proxy_set_header Host $http_host;\r\n    proxy_set_header x-webobjects-server-protocol HTTP/1.0;\r\n    proxy_set_header x-webobjects-remote-host $remote_addr;\r\n    proxy_set_header x-webobjects-server-name $server_name;\r\n    proxy_set_header x-webobjects-server-url $client_req_scheme://$http_host;\r\n    proxy_set_header x-webobjects-server-port $server_port;\r\n    client_body_buffer_size 128k;\r\n    client_max_body_size 100m;\r\n  }\r\n\r\n  location ^~ /SOGo {\r\n    proxy_pass http://172.22.1.252:20000;\r\n    proxy_set_header X-Real-IP $remote_addr;\r\n    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\r\n    proxy_set_header Host $http_host;\r\n    proxy_set_header x-webobjects-server-protocol HTTP/1.0;\r\n    proxy_set_header x-webobjects-remote-host $remote_addr;\r\n    proxy_set_header x-webobjects-server-name $server_name;\r\n    proxy_set_header x-webobjects-server-url $client_req_scheme://$http_host;\r\n    proxy_set_header x-webobjects-server-port $server_port;\r\n    client_body_buffer_size 128k;\r\n    client_max_body_size 100m;\r\n    break;\r\n  }\r\n\r\n  location /SOGo.woa/WebServerResources/ {\r\n    proxy_pass http://172.22.1.252:9192/WebServerResources/;\r\n    proxy_set_header Host $http_host;\r\n    proxy_cache sogo;\r\n    proxy_cache_valid 200 1d;\r\n    proxy_cache_use_stale error timeout invalid_header updating http_500 http_502 http_503 http_504;\r\n    #alias /usr/lib/GNUstep/SOGo/WebServerResources/;\r\n    allow all;\r\n  }\r\n\r\n  location /.woa/WebServerResources/ {\r\n    proxy_pass http://172.22.1.252:9192/WebServerResources/;\r\n    proxy_set_header Host $http_host;\r\n    proxy_cache sogo;\r\n    proxy_cache_valid 200 1d;\r\n    proxy_cache_use_stale error timeout invalid_header updating http_500 http_502 http_503 http_504;\r\n    #alias /usr/lib/GNUstep/SOGo/WebServerResources/;\r\n    allow all;\r\n  }\r\n\r\n  location /SOGo/WebServerResources/ {\r\n    proxy_pass http://172.22.1.252:9192/WebServerResources/;\r\n    proxy_set_header Host $http_host;\r\n    proxy_cache sogo;\r\n    proxy_cache_valid 200 1d;\r\n    proxy_cache_use_stale error timeout invalid_header updating http_500 http_502 http_503 http_504;\r\n    #alias /usr/lib/GNUstep/SOGo/WebServerResources/;\r\n    allow all;\r\n  }\r\n\r\n  location (^/SOGo/so/ControlPanel/Products/[^/]*UI/Resources/.*\\.(jpg|png|gif|css|js)$ {\r\n    proxy_pass http://172.22.1.252:9192/$1.SOGo/Resources/$2;\r\n    proxy_set_header Host $http_host;\r\n    proxy_cache sogo;\r\n    proxy_cache_valid 200 1d;\r\n    proxy_cache_use_stale error timeout invalid_header updating http_500 http_502 http_503 http_504;\r\n    #alias /usr/lib/GNUstep/SOGo/$1.SOGo/Resources/$2;\r\n  }\r\n\r\n}\r\n```"},"comment":{"url":"https://api.github.com/repos/mailcow/mailcow-dockerized/issues/comments/334436896","html_url":"https://github.com/mailcow/mailcow-dockerized/issues/550#issuecomment-334436896","issue_url":"https://api.github.com/repos/mailcow/mailcow-dockerized/issues/550","id":334436896,"user":{"login":"longtawan","id":17571379,"avatar_url":"https://avatars3.githubusercontent.com/u/17571379?v=4","gravatar_id":"","url":"https://api.github.com/users/longtawan","html_url":"https://github.com/longtawan","followers_url":"https://api.github.com/users/longtawan/followers","following_url":"https://api.github.com/users/longtawan/following{/other_user}","gists_url":"https://api.github.com/users/longtawan/gists{/gist_id}","starred_url":"https://api.github.com/users/longtawan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/longtawan/subscriptions","organizations_url":"https://api.github.com/users/longtawan/orgs","repos_url":"https://api.github.com/users/longtawan/repos","events_url":"https://api.github.com/users/longtawan/events{/privacy}","received_events_url":"https://api.github.com/users/longtawan/received_events","type":"User","site_admin":false},"created_at":"2017-10-05T11:25:34Z","updated_at":"2017-10-05T11:25:34Z","author_association":"NONE","body":"Hi there,\r\n\r\nI just wanted to ask if there is a solution on the issue above, cause I have the same prblem and absolute no clue how to solve it.\r\nThnx,\r\nIngo"}}
{"actor":{"display_login":"longtawan"}}