Waiting for Zitadel to become ready LOOP

[alfrefarina]

Describe the problem

I'm following the Quickstart guide for self hosting, I've successfully opened the required ports and pointed my public domain to the VM. Unfortunately it gets stuck on Waiting for Zitadel to become ready, I can access the Zitadel page with https://domainname:443/ui/console and I can also see that I get the Lets Encrypt certificate.

If I just type the domain name I get a blank page.

To Reproduce

Follow the Quickstart Guide

Expected behavior

It should go further and show me the NetBird console

Are you using NetBird Cloud?

No

NetBird version

Latest

Screenshots

[braginini]

hey @alfrefarina Are you running behind Cloudflare? Also, could you please send the output of docker compose logs command?

[alfrefarina]

Hello, thanks for answering, no I'm not running behind Cloudflare. These are the logs, I hope I sent them correctly. netbird_docker_logs.txt

[mlsmaycon]

@alfrefarina, can you confirm if the issue persists and if you are running with the required VM size?

The database used by Zitadel is quite resource-intensive, so you should have at least 1CPU and 2GB of memory

[alfrefarina]

Yes, the issue still persists. My machine is an Ubuntu 20.04 with 4CPU and 4GB of memory.

[mlsmaycon]

the script validates the zitadel endpoint by issuing a request to Zitadel using the domain and generated PAT.

you can test it out with the following command:

PAT=$(cat ./machinekey/zitadel-admin-sa.token)
NETBIRD_DOMAIN=<your_instance_domain>
curl -v --fail -o /dev/null "https://$NETBIRD_DOMAIN/auth/v1/users/me" -H "Authorization: Bearer $PAT"

Is possible that the system can't access the docker container using this domain

[alfrefarina]

If I run these commands the script gets stuck "Trying IP:443.." at 0%, if I access the URL https://$NETBIRD_DOMAIN/auth/v1/users/me it says: "code: 16, message: auth header missing"

[mlsmaycon]

can you update your /etc/hosts file and add the NETBIRD_DOMAIN value pointing to a local VM IP address and then try again?

[alfrefarina]

If I point the NETBIRD_DOMAIN to the local IP address your commands seem to work, but shouldn't the domain point to the Public IP?

[mlsmaycon]

only for remote clients, the services don't need to use private IP addresses, so changing the /etc/hosts should be fine.

[alfrefarina]

Sorry but I'm confused, if I rerun the quickstart script with NETBIRD_DOMAIN pointing to my local private IP address I won't get a certificate, because it needs my Public IP address, or am I wrong?

[mlsmaycon]

This will only happen if you update the domain in your DNS provider. However, updating the local server's /etc/hosts file should not affect certificate provisioning.

[alfrefarina]

Ok, thank you very much, I rerun the script and I can successfully reach NetBird's dashboard.