search

bunkerity / bunkerweb

🛡️ Open-source and next-generation Web Application Firewall (WAF)
https://www.bunkerweb.io
GNU Affero General Public License v3.0
6.15k stars 340 forks source link

[BUG] Lost API endpoint in nginx after a while #1277

Closed thelittlefireman closed 1 month ago

thelittlefireman commented 2 months ago

What happened?

Afters some times i lost the api endpoint in nginx. Everything is working but the api endpoint is missing.

i check by netstat and the port related to the api is not listed.

i'v notice some lua errors but i don't know if there are related.

2024/06/13 13:39:44 [error] 1558#1558: *2183462 failed to run set_by_lua*: /usr/share/bunkerweb/deps/lib/lua/resty/lock.lua:154: API disabled in the context of set_by_lua*
stack traceback:
    [C]: in function 'sleep'
    /usr/share/bunkerweb/deps/lib/lua/resty/lock.lua:154: in function 'lock'
    /usr/share/bunkerweb/deps/lib/lua/resty/mlcache.lua:730: in function 'get'
    /usr/share/bunkerweb/lua/bunkerweb/cachestore.lua:107: in function 'get'
    set_by_lua(default-server-http/whitelist.conf:3):62: in main chunk, client: X.X.X.X, server: _, request: "GET / HTTP/1.1", host: "X.X.X.X"

How to reproduce?

Juste run the containers and after a while bw-schduler can't reach the api endpoint and api port is not listen anymore by nginx

Configuration file(s) (yaml or .env)

`
  bw-scheduler:
    image: bunkerity/bunkerweb-scheduler:1.5.7
    container_name: bw-scheduler
    depends_on:
      - bw-docker-proxy
      - bw-db
      - bw-syslog-ng
    logging:
      driver: syslog
      options:
        syslog-address: "udp://localhost:514"
    volumes:
      - ./nginx/config:/data
    environment:
      - DOCKER_HOST=tcp://bw-docker-proxy:2375
      - LOG_LEVEL=notice
      - DATABASE_URI=mysql+pymysql://bunkerweb:XXXXX@bw-db:3306/db
    networks:
      - bw-universe
      - bw-docker
# Fix nginx running in host network
    extra_hosts:
      - "nginx:192.168.1.150"

  bw-db:
    image: mysql:latest
    container_name: bw-db
    user: "1024:101"
    environment:
      - MYSQL_ROOT_PASSWORD=XXXXXXXXXX
      - MYSQL_DATABASE=db
      - MYSQL_USER=bunkerweb
      - MYSQL_PASSWORD=XXXXXXXX
    command: --mysql-native-password=ON
    expose:
      - 3306
    volumes:
      - "./nginx/db:/var/lib/mysql"
    networks:
      - bw-universe

  nginx:
    image: bunkerity/bunkerweb:1.5.7
    container_name: nginx
    restart: always
    network_mode: "host"
    labels:
      - "bunkerweb.INSTANCE" # required for the scheduler to recognize the container
    volumes:
      # Set timezone
      - "/etc/TZ:/etc/timezone:ro"
      - "/etc/localtime:/etc/localtime:ro"
    # dropping all capabilities
    cap_drop:
      - ALL
    security_opt:
      - no-new-privileges
    depends_on:
      - authelia
      - bw-scheduler
      - bw-docker-proxy
      - bw-db
      - bw-syslog-ng
    logging:
      driver: syslog
      options:
        syslog-address: "udp://localhost:514"
    environment:
      - EXTERNAL_PLUGIN_URLS=https://github.com/bunkerity/bunkerweb-plugins/archive/refs/tags/v1.5.zip
      - DATABASE_URI=mysql+pymysql://bunkerweb:XXXXXXX@bw-db:3306/db
      - MULTISITE=yes
      - LOG_LEVEL=notice
      - API_WHITELIST_IP=127.0.0.0/8 172.16.3.0/24 172.16.4.0/24
      - API_HTTP_PORT=5100
      - API_SERVER_NAME=nginx
      # Usefull for testing avoir letsencrypt blocked due to limits
      - USE_LETS_ENCRYPT_STAGING=no
      - AUTO_LETS_ENCRYPT=yes
      - EMAIL_LETS_ENCRYPT=admin@XXXXX
      - SERVER_NAME=XXXX
      - SERVE_FILES=no
      - REDIRECT_HTTP_TO_HTTPS=yes
      - DISABLE_DEFAULT_SERVER=yes
      - DNS_RESOLVERS=1.1.1.1 1.0.0.1
      - HTTP_PORT=10080
      - HTTPS_PORT=10443
      - HTTP2=yes
      - SSL_PROTOCOLS=TLSv1.2 TLSv1.3
      - USE_GZIP=yes
      - GZIP_COMP_LEVEL=5
      - GZIP_MIN_LENGTH=500
      - USE_BROTLI=yes
      - BROTLI_COMP_LEVEL=5
      - BROTLI_MIN_LENGTH=500

      - STRICT_TRANSPORT_SECURITY=max-age=31536000; includeSubDomains; preload

      # FIXME Too many FP
      - USE_BAD_BEHAVIOR=no
      - BAD_BEHAVIOR_STATUS_CODES=400 401 403 405 444 429

      - USE_DNSBL=yes

      # FIXME Tor exits nodes blocked by default !
      - USE_BLACKLIST=yes

      - USE_WHITELIST=yes
      - WHITELIST_IP=XXXX
      - GREYLIST_USER_AGENT=okhttp* WebDAV DAVx5* axios* sindresorhus* *ggpht.com GoogleImageProxy Python* aiohttp* Bitwarden_Mobile*

      - USE_REVERSE_PROXY=yes
      - USE_MODSECURITY=yes
      - USE_MODSECURITY_CRS=yes

      - USE_BUNKERNET=no
      - USE_API=no

      - USE_LIMIT_REQ=yes
      - LIMIT_REQ_RATE=200r/s

      - USE_LIMIT_CONN=yes
      - LIMIT_CONN_MAX_HTTP1=20
      - LIMIT_CONN_MAX_HTTP2=200

      - BLACKLIST_COUNTRY=CN RU

      - USE_OPEN_FILE_CACHE=yes
      - OPEN_FILE_CACHE=max=1000 inactive=60s
      - OPEN_FILE_CACHE_ERRORS=yes
      - OPEN_FILE_CACHE_MIN_USES=2
      - OPEN_FILE_CACHE_VALID=30s

        ### PLUGINS ###
        # FIXME TMP DISABLE
      - USE_CROWDSEC=no
      - CROWDSEC_API=http://127.0.0.1:48080
        # you need to generate it (see bouncer_key.sh)
      - CROWDSEC_API_KEY=XXXXXXXX
      - USE_VIRUSTOTAL=no
      - USE_DISCORD=no
      - USE_SLACK=no
      - USE_CLAMAV=no
      - USE_CORAZA=no

### Relevant log output

```shell
2024/06/13 13:39:44 [error] 1558#1558: *2183462 failed to run set_by_lua*: /usr/share/bunkerweb/deps/lib/lua/resty/lock.lua:154: API disabled in the context of set_by_lua*
stack traceback:
    [C]: in function 'sleep'
    /usr/share/bunkerweb/deps/lib/lua/resty/lock.lua:154: in function 'lock'
    /usr/share/bunkerweb/deps/lib/lua/resty/mlcache.lua:730: in function 'get'
    /usr/share/bunkerweb/lua/bunkerweb/cachestore.lua:107: in function 'get'
    set_by_lua(default-server-http/whitelist.conf:3):62: in main chunk, client: X.X.X.X, server: _, request: "GET / HTTP/1.1", host: "X.X.X.X"
[2024-06-14 20:34:21] - API - ❌ - Can't send API request to http://nginx:5100/cache : Request failed: HTTPConnectionPool(host='nginx', port=5100): Max retries exceeded with url: /cache (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x7ff5a4132210>: Failed to establish a new connection: [Errno 111] Connection refused'))
[2024-06-14 20:34:21] - SCHEDULER - ❌ - Error while sending /var/cache/bunkerweb folder
[2024-06-14 20:34:21] - SCHEDULER - ℹ️  - Reloading nginx ...
[2024-06-14 20:34:21] - API - ❌ - Can't send API request to http://nginx:5100/reload : Request failed: HTTPConnectionPool(host='nginx', port=5100): Max retries exceeded with url: /reload (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x7ff5a4133980>: Failed to establish a new connection: [Errno 111] Connection refused'))
[2024-06-14 20:34:21] - SCHEDULER - ❌ - Error while reloading nginx



### BunkerWeb version

1.5.7

### What integration are you using?

Docker

### Linux distribution (if applicable)

_No response_

### Removed private data

- [X] I have removed all private data from the configuration file and the logs

### Code of Conduct

- [X] I agree to follow this project's Code of Conduct
thelittlefireman commented 1 month ago

On v1.5.9, port 5100 disappear after an nginx reload and setup of bunkerweb-ui

[2024-07-31 21:47:51 +0000] [SCHEDULER] [21] [ℹ️ ] - Plugins config changed, generating ...
[2024-07-31 21:48:40 +0000] [SCHEDULER] [21] [ℹ️ ] - Executing job backup-data from plugin backup ...
[2024-07-31 21:48:40 +0000] [SCHEDULER] [21] [ℹ️ ] - Executing job blacklist-download from plugin blacklist ...
[2024-07-31 21:48:40 +0000] [SCHEDULER] [21] [ℹ️ ] - Executing job bunkernet-register from plugin bunkernet ...
[2024-07-31 21:48:40 +0000] [SCHEDULER] [21] [ℹ️ ] - Executing job custom-cert from plugin customcert ...
[2024-07-31 21:48:40 +0000] [SCHEDULER] [21] [ℹ️ ] - Executing job greylist-download from plugin greylist ...
[2024-07-31 21:48:40 +0000] [SCHEDULER] [21] [ℹ️ ] - Executing job mmdb-country from plugin jobs ...
[2024-07-31 21:48:40 +0000] [SCHEDULER] [21] [ℹ️ ] - Executing job certbot-new from plugin letsencrypt ...
[2024-07-31 21:48:40 +0000] [SCHEDULER] [21] [ℹ️ ] - Executing job default-server-cert from plugin misc ...
[2024-07-31 21:48:41 +0000] [BUNKERNET] [528] [ℹ️ ] - BunkerNet is not activated, skipping registration...
[2024-07-31 21:48:41 +0000] [SCHEDULER] [21] [ℹ️ ] - Executing job bunkernet-data from plugin bunkernet ...
[2024-07-31 21:48:41 +0000] [GREYLIST] [541] [ℹ️ ] - Greylist is not activated, skipping downloads...
[2024-07-31 21:48:41 +0000] [SCHEDULER] [21] [ℹ️ ] - Executing job coreruleset-nightly from plugin modsecurity ...
[2024-07-31 21:48:41 +0000] [SCHEDULER] [21] [ℹ️ ] - Successfully updated database for the job bunkernet-register from plugin bunkernet
[2024-07-31 21:48:42 +0000] [SCHEDULER] [21] [ℹ️ ] - Successfully updated database for the job greylist-download from plugin greylist
[2024-07-31 21:48:42 +0000] [MODSECURITY.CORERULESET-NIGHTLY] [577] [ℹ️ ] - Core Rule Set (CRS) nightly is not being used, skipping download...
[2024-07-31 21:48:42 +0000] [SCHEDULER] [21] [ℹ️ ] - Executing job download-pro-plugins from plugin pro ...
[2024-07-31 21:48:43 +0000] [BUNKERNET] [575] [ℹ️ ] - BunkerNet is not activated, skipping download...
[2024-07-31 21:48:43 +0000] [SCHEDULER] [21] [ℹ️ ] - Executing job realip-download from plugin realip ...
[2024-07-31 21:48:43 +0000] [SCHEDULER] [21] [ℹ️ ] - Successfully updated database for the job coreruleset-nightly from plugin modsecurity
[2024-07-31 21:48:43 +0000] [SCHEDULER] [21] [ℹ️ ] - Successfully updated database for the job bunkernet-data from plugin bunkernet
[2024-07-31 21:48:43 +0000] [REALIP] [581] [ℹ️ ] - RealIP is not activated, skipping download...
[2024-07-31 21:48:43 +0000] [SCHEDULER] [21] [ℹ️ ] - Executing job self-signed from plugin selfsigned ...
[2024-07-31 21:48:44 +0000] [SCHEDULER] [21] [ℹ️ ] - Successfully updated database for the job realip-download from plugin realip
[2024-07-31 21:49:01 +0000] [CUSTOM-CERT] [533] [ℹ️ ] - ✅ Database connection established
[2024-07-31 21:49:01 +0000] [SCHEDULER] [21] [ℹ️ ] - Executing job whitelist-download from plugin whitelist ...
[2024-07-31 21:49:02 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - ✅ Database connection established
[2024-07-31 21:49:02 +0000] [SCHEDULER] [21] [ℹ️ ] - Successfully updated database for the job custom-cert from plugin customcert
[2024-07-31 21:49:05 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - Certificates already exists for domain(s) auth.XXXXX.XX
[2024-07-31 21:49:05 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - Certificates already exists for domain(s) bazarr.XXXXX.XX
[2024-07-31 21:49:05 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - Certificates already exists for domain(s) bitwarden.XXXXX.XX
[2024-07-31 21:49:05 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - Certificates already exists for domain(s) bookstack.XXXXX.XX
[2024-07-31 21:49:05 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - Certificates already exists for domain(s) dashboard.XXXXX.XX
[2024-07-31 21:49:05 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - Certificates already exists for domain(s) gitea.XXXXX.XX
[2024-07-31 21:49:05 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - Certificates already exists for domain(s) gitlab.XXXXX.XX
[2024-07-31 21:49:05 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - Certificates already exists for domain(s) home.XXXXX.XX
[2024-07-31 21:49:05 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - Certificates already exists for domain(s) jackett.XXXXX.XX
[2024-07-31 21:49:05 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - Certificates already exists for domain(s) jellyfin.XXXXX.XX
[2024-07-31 21:49:05 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - Certificates already exists for domain(s) kopia.XXXXX.XX
[2024-07-31 21:49:05 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - Certificates already exists for domain(s) ltf.XXXXX.XX
[2024-07-31 21:49:05 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - Certificates already exists for domain(s) mail.XXXXX.XX
[2024-07-31 21:49:05 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - Certificates already exists for domain(s) matrix.XXXXX.XX
[2024-07-31 21:49:05 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - Certificates already exists for domain(s) nextcloud.XXXXX.XX
[2024-07-31 21:49:05 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - Certificates already exists for domain(s) onlyoffice.XXXXX.XX
[2024-07-31 21:49:05 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - Certificates already exists for domain(s) phpmyadmin.XXXXX.XX
[2024-07-31 21:49:05 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - Certificates already exists for domain(s) plex.XXXXX.XX
[2024-07-31 21:49:05 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - Certificates already exists for domain(s) portainer.XXXXX.XX
[2024-07-31 21:49:05 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - Certificates already exists for domain(s) prowlarr.XXXXX.XX
[2024-07-31 21:49:05 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - Certificates already exists for domain(s) radarr.XXXXX.XX
[2024-07-31 21:49:05 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - Certificates already exists for domain(s) rdtclient.XXXXX.XX
[2024-07-31 21:49:05 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - Certificates already exists for domain(s) readarr.XXXXX.XX
[2024-07-31 21:49:05 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - Certificates already exists for domain(s) sonarr.XXXXX.XX
[2024-07-31 21:49:05 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - Certificates already exists for domain(s) syno.XXXXX.XX
[2024-07-31 21:49:05 +0000] [LETS-ENCRYPT.NEW] [546] [ℹ️ ] - Asking certificates for domain(s) : www.XXXXX.XX (email = admin@XXXXX.XX) to Let's Encrypt ...
[2024-07-31 21:49:05 +0000] [DEFAULT-SERVER-CERT] [550] [ℹ️ ] - ✅ Database connection established
[2024-07-31 21:49:05 +0000] [DEFAULT-SERVER-CERT] [550] [ℹ️ ] - Skipping generation of self-signed certificate for default server (already present)
[2024-07-31 21:49:06 +0000] [SCHEDULER] [21] [ℹ️ ] - Executing job anonymous-report from plugin misc ...
[2024-07-31 21:49:06 +0000] [BLACKLIST] [526] [ℹ️ ] - ✅ Database connection established
[2024-07-31 21:49:06 +0000] [SCHEDULER] [21] [ℹ️ ] - Successfully updated database for the job default-server-cert from plugin misc
[2024-07-31 21:49:06 +0000] [BLACKLIST] [526] [ℹ️ ] - Blacklist for IP is not cached, processing downloads..
[2024-07-31 21:49:06 +0000] [BLACKLIST] [526] [ℹ️ ] - Blacklist for USER_AGENT is not cached, processing downloads..
[2024-07-31 21:49:06 +0000] [BLACKLIST] [526] [ℹ️ ] - Downloading blacklist data from https://www.dan.me.uk/torlist/?exit ...
[2024-07-31 21:49:06 +0000] [BLACKLIST] [526] [ℹ️ ] - Downloaded 1921 bad IP
[2024-07-31 21:49:06 +0000] [BLACKLIST] [526] [ℹ️ ] - New file IP.list is different than cache file, reload is needed
[2024-07-31 21:49:06 +0000] [BACKUP] [524] [ℹ️ ] - ✅ Database connection established
[2024-07-31 21:49:07 +0000] [LETS-ENCRYPT.NEW.CERTBOT] [546] [ℹ️ ] - Saving debug log to /var/log/bunkerweb/letsencrypt.log
[2024-07-31 21:49:07 +0000] [BACKUP] [524] [ℹ️ ] - Creating a backup for the MariaDB/MySQL database ...
[2024-07-31 21:49:07 +0000] [BLACKLIST] [526] [ℹ️ ] - Downloading blacklist data from https://raw.githubusercontent.com/mitchellkrogza/nginx-ultimate-bad-bot-blocker/master/_generator_lists/bad-user-agents.list ...
[2024-07-31 21:49:07 +0000] [BLACKLIST] [526] [ℹ️ ] - Downloaded 665 bad USER_AGENT
[2024-07-31 21:49:07 +0000] [BLACKLIST] [526] [ℹ️ ] - New file USER_AGENT.list is identical to cache file, reload is not needed
[2024-07-31 21:49:07 +0000] [SCHEDULER] [21] [ℹ️ ] - Executing job crowdsec-conf from plugin crowdsec ...
[2024-07-31 21:49:07 +0000] [JOBS.MMDB-COUNTRY] [548] [ℹ️ ] - ✅ Database connection established
Requesting a certificate for www.XXXXX.XX
[2024-07-31 21:49:07 +0000] [SCHEDULER] [21] [ℹ️ ] - Successfully updated database for the job blacklist-download from plugin blacklist
[2024-07-31 21:49:07 +0000] [CROWDSEC] [603] [ℹ️ ] - CrowdSec is not activated, skipping job...
[2024-07-31 21:49:07 +0000] [JOBS.MMDB-COUNTRY] [548] [ℹ️ ] - country.mmdb is already the latest version and is cached, skipping...
[2024-07-31 21:49:07 +0000] [SCHEDULER] [21] [ℹ️ ] - Successfully updated database for the job crowdsec-conf from plugin crowdsec
[2024-07-31 21:49:08 +0000] [SCHEDULER] [21] [ℹ️ ] - Executing job mmdb-asn from plugin jobs ...
[2024-07-31 21:49:08 +0000] [SELF-SIGNED] [588] [ℹ️ ] - ✅ Database connection established
[2024-07-31 21:49:08 +0000] [BACKUP] [524] [ℹ️ ] - Creating a backup for the MariaDB/MySQL database ...
[2024-07-31 21:49:08 +0000] [SCHEDULER] [21] [ℹ️ ] - Successfully updated database for the job mmdb-country from plugin jobs
[2024-07-31 21:49:08 +0000] [SELF-SIGNED] [588] [ℹ️ ] - Service www.XXXXX.XX is using self-signed SSL certificates, checking ...
[2024-07-31 21:49:08 +0000] [SELF-SIGNED] [588] [ℹ️ ] - Generating self-signed certificate for www.XXXXX.XX
[2024-07-31 21:49:08 +0000] [JOBS.DOWNLOAD-PRO-PLUGINS] [579] [ℹ️ ] - ✅ Database connection established
[2024-07-31 21:49:08 +0000] [JOBS.DOWNLOAD-PRO-PLUGINS] [579] [ℹ️ ] - Checking BunkerWeb Pro status...
[2024-07-31 21:49:08 +0000] [JOBS.DOWNLOAD-PRO-PLUGINS] [579] [ℹ️ ] - Skipping the check for BunkerWeb Pro license (already checked today)
[2024-07-31 21:49:08 +0000] [SELF-SIGNED] [588] [ℹ️ ] - Successfully generated self-signed certificate for www.XXXXX.XX
[2024-07-31 21:49:08 +0000] [WHITELIST] [596] [ℹ️ ] - ✅ Database connection established
[2024-07-31 21:49:08 +0000] [BACKUP] [524] [ℹ️ ] - Creating a backup for the MariaDB/MySQL database ...
[2024-07-31 21:49:08 +0000] [SCHEDULER] [21] [ℹ️ ] - Successfully updated database for the job download-pro-plugins from plugin pro
[2024-07-31 21:49:08 +0000] [WHITELIST] [596] [ℹ️ ] - No whitelist URL is configured, nothing to do...
[2024-07-31 21:49:09 +0000] [SCHEDULER] [21] [ℹ️ ] - Successfully updated database for the job self-signed from plugin selfsigned
[2024-07-31 21:49:09 +0000] [SCHEDULER] [21] [ℹ️ ] - Successfully updated database for the job whitelist-download from plugin whitelist
[2024-07-31 21:49:09 +0000] [ANONYMOUS-REPORT] [600] [ℹ️ ] - ✅ Database connection established
[2024-07-31 21:49:09 +0000] [BACKUP] [524] [ℹ️ ] - Creating a backup for the MariaDB/MySQL database ...
[2024-07-31 21:49:09 +0000] [ANONYMOUS-REPORT] [600] [ℹ️ ] - Skipping the sending of anonymous report (already sent today)
[2024-07-31 21:49:09 +0000] [SCHEDULER] [21] [ℹ️ ] - Executing job download-plugins from plugin misc ...
[2024-07-31 21:49:12 +0000] [LETS-ENCRYPT.NEW.CERTBOT] [546] [ℹ️ ] - Hook '--manual-auth-hook' for www.XXXXX.XX reported error code 1
[2024-07-31 21:49:12 +0000] [LETS-ENCRYPT.NEW.CERTBOT] [546] [ℹ️ ] - Hook '--manual-auth-hook' for www.XXXXX.XX ran with error output:
[2024-07-31 21:49:12 +0000] [LETS-ENCRYPT.NEW.CERTBOT] [546] [ℹ️ ] - [2024-07-31 21:49:09 +0000] [LETS-ENCRYPT.AUTH] [607] [ℹ️ ] - Detected Docker integration
[2024-07-31 21:49:12 +0000] [LETS-ENCRYPT.NEW.CERTBOT] [546] [ℹ️ ] - [2024-07-31 21:49:12 +0000] [LETS-ENCRYPT.AUTH] [607] [ℹ️ ] - ✅ Database connection established
[2024-07-31 21:49:12 +0000] [LETS-ENCRYPT.NEW.CERTBOT] [546] [ℹ️ ] - [2024-07-31 21:49:12 +0000] [LETS-ENCRYPT.AUTH] [607] [ℹ️ ] - Sending challenge to 1 instances
[2024-07-31 21:49:12 +0000] [LETS-ENCRYPT.NEW.CERTBOT] [546] [ℹ️ ] - [2024-07-31 21:49:12 +0000] [LETS-ENCRYPT.AUTH] [607] [❌] - Can't send API request to http://nginx:5100//lets-encrypt/challenge : Request failed: HTTPConnectionPool(host='nginx', port=5100): Max retries exceeded with url: /lets-encrypt/challenge (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x7f72677e6180>: Failed to establish a new connection: [Errno 111] Connection refused'))
thelittlefireman commented 1 month ago

quick temporary workaround 'docker stop nginx bw-scheduler' 'docker start nginx bw-scheduler'

thelittlefireman commented 1 month ago

If I monitor watch -n 1 netstat -lt | grep 443 I confirm that just after an [2024-07-31 22:02:03 +0000] [API] [22] [ℹ️ ] - Successfully sent API request to http://nginx:5100/reload the port 5100 disappear. I think something break the api port after sending new configuration to nginx. Could it be possible to fix this please ?

thelittlefireman commented 1 month ago

I found the issue, it's my mistake a miss-configuration