Help setting up SSL Letsencrypt with caddy other port than 443

Community Support
1

Description

I just installed rocket chat using snap and the snap tutorial
I am trying to setup Letsencrypt SSL
My rocket chat server is behind a firewall with private IP and port 8888 forward to port 3000
Not sure what I am doing wrong
Thanks!

Server Setup Information

  • Version of Rocket.Chat Server:
  • Operating System: Ubuntu 18.04.4 LTS
  • Deployment Method:
  • Number of Running Instances: 1
  • DB Replicaset Oplog: IDK
  • NodeJS Version: IDK
  • MongoDB Version: 3.6.14 MongoDB Engine: wiredTiger
  • Proxy:
  • Firewalls involved: Fortigate in NAT mode

Any additional Information

###Caddy config
https://coms.replaced.[link-removed]:8888 {
proxy / localhost:3000 {
websocket
transparent
}
}
###Logs
Mar 28 03:34:28 coms rocketchat-server.rocketchat-caddy[28379]: Activating privacy features… 2020/03/28 03:34:28 [INFO] [coms.replaced.tld] acme: Obtaining bundled SAN certificate
Mar 28 03:34:29 coms rocketchat-server.rocketchat-caddy[28379]: 2020/03/28 03:34:29 [INFO] [coms.replaced.tld] AuthURL: acme-v02.api.letsencrypt.[link-removed]/acme/authz-v3/3607324106
Mar 28 03:34:29 coms rocketchat-server.rocketchat-caddy[28379]: 2020/03/28 03:34:29 [INFO] [coms.replaced.tld] acme: Could not find solver for: tls-alpn-01
Mar 28 03:34:29 coms rocketchat-server.rocketchat-caddy[28379]: 2020/03/28 03:34:29 [INFO] [coms.replaced.tld] acme: use http-01 solver
Mar 28 03:34:29 coms rocketchat-server.rocketchat-caddy[28379]: 2020/03/28 03:34:29 [INFO] [coms.replaced.tld] acme: Trying to solve HTTP-01
Mar 28 03:34:42 coms rocketchat-server.rocketchat-caddy[28379]: 2020/03/28 03:34:42 [INFO] Deactivating auth: acme-v02.api.letsencrypt.[link-removed]/acme/authz-v3/3607324106
Mar 28 03:34:43 coms rocketchat-server.rocketchat-caddy[28379]: 2020/03/28 03:34:43 [INFO] Unable to deactivate the authorization: acme-v02.api.letsencrypt.[link-removed]/acme/authz-v3/3607324106

2

LetsEncrypt requires port 80 to be unblocked in order to work.

3

So i need to forward external port 80 to 8888 or 3000 ?
Thanks

4

You need to forward port 80 to port 80.