Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

generate certificate for mail.domain #81

Open
DamianoP opened this issue Oct 7, 2020 · 0 comments
Open

generate certificate for mail.domain #81

DamianoP opened this issue Oct 7, 2020 · 0 comments

Comments

@DamianoP
Copy link

DamianoP commented Oct 7, 2020

Hi,
I have configured a system with multiple docker containers and everything is working fine.
Now I'm trying to generate the certificate for a docker container that runs simple-mail-forwarder (I'm using jrcs/letsencrypt-nginx-proxy-companion).

version: '3'
services:
  mailserver:
    image: zixia/simple-mail-forwarder
    container_name: mailserver
    environment:
      - SMF_CONFIG=@domain.org:myemail
      - SMF_DOMAIN=mail.domain.org
      - LETSENCRYPT_HOST=mail.domain.org
      - LETSENCRYPT_EMAIL=myprivateemailaddress
    ports:
      - "25:25"
    restart: always

The system cannot generate the certificate for this container

CA marked some of the authorizations as invalid, which likely means it could not access http://example.com/.well-known/acme-challenge/X. 
Did you set correct path in -d example.com:path or --default_root? 
Are all your domains accessible from the internet? Please check your domains' DNS entries, your host's network/firewall setup and your webserver config. If a domain's DNS entry has both A and AAAA fields set up, some CAs such as Let's Encrypt will perform the challenge validation over IPv6. 
If your DNS provider does not answer correctly to CAA records request, Let's Encrypt won't issue a certificate for your domain (see https://letsencrypt.org/docs/caa/). Failing authorizations: https://acme-v02.api.letsencrypt.org/acme/authz-v3/7728213527
Challenge validation has failed, see error log.

I only need to certificate "mail.domain.org".
I already have the cert for "domain.org" and "www.domain.org" in another container.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant