!MthpOIxqJhTgrMNxDS:nixos.org

NixOS ACME / LetsEncrypt

104 Members
Another day, another cert renewal44 Servers

You have reached the beginning of time (for this room).


SenderMessageTime
7 Feb 2024
@netpleb:matrix.orgnetplebyes, I can ping that domain name no problem21:50:12
@netpleb:matrix.orgnetpleb
[root@netpleb-public-services:~]# systemctl status acme-netpleb.com.service
○ acme-netpleb.com.service - Renew ACME certificate for netpleb.com
     Loaded: loaded (/etc/systemd/system/acme-netpleb.com.service; linked; preset: enabled)
     Active: inactive (dead)
TriggeredBy: ● acme-netpleb.com.timer

Feb 07 21:48:41 netpleb-public-services systemd[1]: Dependency failed for Renew ACME certificate for netpleb.com.
Feb 07 21:48:41 netpleb-public-services systemd[1]: acme-netpleb.com.service: Job acme-netpleb.com.service/start failed with result 'dependency'.

[root@netpleb-public-services:~]# ping netpleb.com
PING netpleb.com (38.45.103.128) 56(84) bytes of data.
64 bytes from ns1.netpleb.com (38.45.103.128): icmp_seq=1 ttl=64 time=0.041 ms
64 bytes from ns1.netpleb.com (38.45.103.128): icmp_seq=2 ttl=64 time=0.064 ms
^C
--- netpleb.com ping statistics ---
2 packets transmitted, 2 received, 0% packet loss, time 1064ms
rtt min/avg/max/mdev = 0.041/0.052/0.064/0.011 ms
21:51:06
@k900:0upti.meK900Not that 21:51:36
@k900:0upti.meK900acme-v02.api.letsencrypt.org21:51:46
@k900:0upti.meK900Can you ping that? 21:51:49
@netpleb:matrix.orgnetplebhmm, nope! wtf, I can ping google.com just fine though. What is going on?21:53:15
@k900:0upti.meK900You have a DNS problem 21:55:01
@k900:0upti.meK900Have fun 21:55:03
@netpleb:matrix.orgnetplebI am obviously not an expert in these things (though getting to know/learn Nix, both the language and the OS has been overall a rewarding experience). How is it possible that I can ping google but not letsencrypt?21:58:24
@netpleb:matrix.orgnetpleb * ... 21:59:26
@k900:0upti.meK900Something about your DNS config is broken 22:01:14
@k900:0upti.meK900That's not really a NixOS problem 22:01:23
@k900:0upti.meK900More of a general networking problem 22:01:28
@netpleb:matrix.orgnetpleb

ok, sorry, i fixed the dns issue already. I am now able to ping it:

[root@netpleb-public-services:~]# ping acme-v02.api.letsencrypt.org
PING ca80a1adb12a4fbdac5ffcbc944e9a61.pacloudflare.com (172.65.32.248) 56(84) bytes of data.
64 bytes from 172.65.32.248: icmp_seq=1 ttl=59 time=94.5 ms
64 bytes from 172.65.32.248: icmp_seq=2 ttl=59 time=93.1 ms
64 bytes from 172.65.32.248: icmp_seq=3 ttl=59 time=108 ms
64 bytes from 172.65.32.248: icmp_seq=4 ttl=59 time=100 ms

22:02:04
@k900:0upti.meK900Now you can restart the ACME service 22:03:14
@k900:0upti.meK900And maybe it'll actually succeed22:03:18

Show newer messages


Back to Room ListRoom Version: 6