NginxProxyManager / nginx-proxy-manager

Docker container for managing Nginx proxy hosts with a simple, powerful interface
https://nginxproxymanager.com
MIT License
22.29k stars 2.58k forks source link

GoDaddy SSL Issue #3544

Open Voltherthorn opened 7 months ago

Voltherthorn commented 7 months ago

When using GoDaddy DNS-Letsencrypt seems to use the subdomain on the API wich seems to be wrong.

Error determining zone identifier for vault.xyz.com: 404 Client Error: Not Found for url: https://api.godaddy.com/v1/domains/vault.xyz.com. Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /tmp/letsencrypt-log/letsencrypt.log or re-run Certbot with -v for more details.

Red3nzo commented 6 months ago

I have a very similar issue, I keep getting:

Error determining zone identifier for <DOMAIN>: 401 Client Error: Unauthorized for url: https://api.godaddy.com/v1/domains/<DOMAIN>.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /tmp/letsencrypt-log/letsencrypt.log or re-run Certbot with -v for more details.

Does anyone have a solution for this?

Voltherthorn commented 6 months ago

Create a Wildcardzertificat. That works.

TarekMSayed commented 4 months ago

@Voltherthorn how did you resolve it?

TarekMSayed commented 4 months ago

I have a very similar issue, I keep getting:

Error determining zone identifier for <DOMAIN>: 401 Client Error: Unauthorized for url: https://api.godaddy.com/v1/domains/<DOMAIN>.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /tmp/letsencrypt-log/letsencrypt.log or re-run Certbot with -v for more details.

Does anyone have a solution for this? I still have the same issue with the latest version 2.11.2

NetRat88 commented 3 months ago

Runnging in the same error and have no access to my local devices with my own domain any more. Created a wildcard certificat in the passt.

`CommandError: Saving debug log to /tmp/letsencrypt-log/letsencrypt.log Error determining zone identifier for neuendot.com: 403 Client Error: Forbidden for url: https://api.godaddy.com/v1/domains/mydomain.com. Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /tmp/letsencrypt-log/letsencrypt.log or re-run Certbot with -v for more details.

at /app/lib/utils.js:16:13
at ChildProcess.exithandler (node:child_process:430:5)
at ChildProcess.emit (node:events:519:28)
at maybeClose (node:internal/child_process:1105:16)
at ChildProcess._handle.onexit (node:internal/child_process:305:5)`

Any workaround or help for this issue?

danmarce commented 3 months ago

I had the same Issue. It seems GoDaddy removed API access unless you have 10 domains

https://new.reddit.com/r/selfhosted/comments/1cnipp3/warning_godaddy_silently_cut_access_to_their_dns/

So I moved to CloudFlare

Edit: Typo

TheRealVira commented 3 months ago

GoDaddy just changed their API without notice and broke my complete pipeline. https://www.reddit.com/r/godaddy/comments/1bl0f5r/am_i_the_only_one_who_cant_use_the_api/

I cannot believe they thought this to be a good idea.

NetRat88 commented 2 months ago

I immediately switched from GoDaddy to Cloudflare after getting in contact with GoDaddy support. This support and answers were horrible! The whole communication of GoDaddy was the worst I have ever had!

The domain transfer to cloudflare took only one day and I could directly create the SSL wildcard certificate after adding the domain and set the DNS server in the GoDaddy settings. (all before the final transfer was done)

Bye bye GoDaddy, this was a really stupid move!

danmarce commented 2 months ago

Yeah, moving to Cloudflare was good.

If their idea was to force users to buy more domains with them, they are wrong. I only had 3 domains for my homelab and other personal stuff. I wonder how many small users will move too. I even deleted my account.

And now I'm even using Cloudflare's Zero Trust, really easy to do to expose my services safely, an only using the free tier. Also the whole thing is more "professional".

MrAkaki commented 1 month ago

This repo is a webhook for certbot in Kubernetes, they manage to call the API and submit the dns entries I don't have enough time to make the migration, but some else could look into. https://github.com/snowdrop/godaddy-webhook/

Where the api call is made: https://github.com/snowdrop/godaddy-webhook/blob/ebac6469fcbd9a6171d9d018d66baeb3528125ab/main.go#L382C28-L382C41

getDownloader commented 3 weeks ago

GoDaddy OTE API endpoint does not have a domain limit of 10, but you will need to update other dependencies to support this.. Note that the endpoint addresses for the production key ( https://api.godaddy.com/ ) and the OTE key ( https://api.ote-godaddy.com/ ) are different.