LetsEncrypt with NodeBB

webeindustry

Yep , so now I'm on SSL support.

I have this in my serverblock:

location /.well-known/acme-challenge {
root /var/www/nodebb;
}
}

& issue this command at /opt/letsencrypt

./letsencrypt-auto certonly -a webroot --webroot-path=/var/www/nodebb -d node.mydomainaddy.com

I get this error:

Domain: node.mydomainaddy.com
Type:   unauthorized
Detail: Invalid response from http://node.mydomainaddy.com/.well-
known/acme-challenge/-GpRyhKl3iHOn7CPvo-y8495N-VMBgmboTHGK28TngY
[711.211.717.413]: 403

nginx log says:
failed permission denied.

frissdiegurke

Take a look at the tutorial for this and you'll see that you have to do it like this:

server {
    listen       80;
    server_name  yourdomainhere.com;

    root   /var/www/yourdomainhere.com/html;

    location /.well-known/acme-challenge/  {
        try_files $uri =404;
    }

    [...]
}

It's not root /var/www/nodebb but the letsencrypt html files that is needed as response.

webeindustry

Buddy I'm not following at all. The letsencrypt files are in the .well-known which are inside of the /var/www/nodebb webroot.

I added the try_files $uri =404;

It says "The client lacks sufficient authorization"

I've been through this procedure at least a dozen times now. Minutes prior to attempting with nodebb, I used it with discourse & flarum without issue. There's some sort of goof, but I'm not seeing it yet.

Thanks for the reply.

addition:

Okay it's fixed. The verification fails if using a symlink. I should have realized that wouldn't work. Just another goof. Removed the symlink and moved the folder.