notthebee / ansible-easy-vpn

An Ansible playbook that sets up a Wireguard server with ad blocking, DNS-over-HTTPS, and a WebUI with 2FA
Other
996 stars 237 forks source link

Error when entering domain #270

Closed displyypeterson closed 3 months ago

displyypeterson commented 5 months ago

Hi, I get an error after I enter my domain. I tried with both cloudflare and duckdns.

Requesting a certificate for displyy.xyz and 2 more domains

Certbot failed to authenticate some domains (authenticator: standalone). The Certificate Authority reported these problems:
  Domain: auth.displyy.xyz
  Type:   dns
  Detail: DNS problem: NXDOMAIN looking up A for auth.displyy.xyz - check that a DNS record exists for this domain; DNS problem: NXDOMAIN looking up AAAA for auth.displyy.xyz - check that a DNS record exists for this domain

  Domain: wg.displyy.xyz
  Type:   dns
  Detail: DNS problem: NXDOMAIN looking up A for wg.displyy.xyz - check that a DNS record exists for this domain; DNS problem: NXDOMAIN looking up AAAA for wg.displyy.xyz - check that a DNS record exists for this domain

Hint: The Certificate Authority failed to download the challenge files from the temporary standalone webserver started by Certbot on port 80. Ensure that the listed domains point to this machine and that it can accept inbound connections from the internet.

Some challenges have failed.
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.
carlHandy commented 5 months ago

If you're using Cloudflare ensure the subdomain isn't proxied during setup, you can enable proxy after @displyypeterson

You also need to ensure that these subdomains exists:

wg.yourdomain.xyz adguard.yourdomain.xyz auth.yourdomain.xyz

In your custom.yml I wouldn't recommend doing a sub domain i.e subdomain.yourdomain.xyz cause then the script will look for wg.subdomain.yourdomain.xyz etc

Hope this helps!

EDIT

I was wrong about it working with cloudflare proxied. I still old configs pointing to different endpoint. Proxy needs to be off.

notthebee commented 3 months ago

Looks like a firewall issue to me. Make sure that all the relevant ports are open. If that doesn't help, submit an issue upstream (Certbot)