NginxProxyManager / NginxProxyManager/nginx-proxy-manager
Fails to add a let's encrypt certificate via DNS for digital ocean provider.
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 34.2k
- Forks
- 3.9k
- Avg merge
- 21h 12m
- Merged PRs (30d)
- 20
Description
I am using jc21/nginx-proxy-manager:latest on Raspbian 11 bullseye, and I'm trying to generate a wildcard certificate for NPM to use.
When attempting to add a let's encrypt certificate using the nice friendly GUI, I find it produces a red 'internal error' box with an error as follows (top of extract):
Error: Command failed: pip install certbot-dns-digitalocean==$(certbot --version | grep -Eo '[0-9](\.[0-9]+)+')
error: subprocess-exited-with-error
× pip subprocess to install build dependencies did not run successfully.
│ exit code: 1
╰─> [123 lines of output]
I will attach the details in a text file.
This is a brand new install, installed yesterday.
Nginx Proxy Manager Version is v2.9.16
To Reproduce
Steps to reproduce the behavior:
- Log in
- CLick on SSL Certs, Add
- Enter wildcard domain name *.yourdomain.com
- Make sure you click to add it just below where you entered the domain.
- Enter a a valid email
- TIck use DNS Challenge.
- Choose digital ocean from providers list.
- Go to digital ocean (cloud.digitalocean.com), log in and click API, generate new token
- Set the token to your wildcard domain name (*.yourdomain.com)
- Set expires: never,
- Tick write access, then generate.
- Click 'copy' just tot he right of the key.
- Go back to the NPM screen and paste the key (replacing the existing code) after the 'token=' bit of the credentials area.
- Tick agree and then SAVE.
- Do nothing, just wait for the error.
Expected behavior
I expected it to contact Digital Ocean using the API key I gave it.
System
Rpi 2B
OS: Raspbian 11 bullseye
Kernel: armv7l Linux 5.10.92-v7+
CPU: ARMv7 rev 5 (v7l) @ 4x 900MHz
RAM: 922MiB
Additional context
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reviewing the attached details.txt and reproducing the listed wildcard certificate steps on the specified Nginx Proxy Manager, Raspbian, and ARMv7 setup. Trace the pip and certbot installation failure for the DigitalOcean DNS provider; done means the wildcard certificate request completes without the internal error.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- docker, nginx
- Domain
- cloud, devops, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100