SNAP snaffoo with SSL

Description

Installed Ubuntu 22 + SNAP + the caddy that came with SNAP version 6.13.0

After the install ssl no worky because the domains it was reaching out to, I suspect, were blocked by the firewall.

Server Setup Information

  • Version of Rocket.Chat Server: SNAP 6.13.0
  • Operating System: Ubuntu 22 Server
  • Deployment Method: snap
  • Number of Running Instances: 1
  • DB Replicaset Oplog: 0
  • NodeJS Version: ?
  • MongoDB Version: ?
  • Proxy: caddy
  • Firewalls involved: NAT public IP

Any additional Information

I tried to ren ~/snap/rocketchat-server/current/.caddy/acme to acme.old
like I found on some forums then restart rocket-chat server / caddy to see if it would rebuild with the server name. Nadaa.

I also tried to do the commands again:

snap set rocketchat-server siteurl=https://mydomain.whatever
systemctl enable --now snap.rocketchat-server.rocketchat-caddy
snap restart rocketchat-server

Nothing seems to work for the server to attempt to pickup the ssl and install it with the public fqdn.

Oh, I also tried to add my IP + host to the /etc/hosts file like so:

127.0.0.1 localhost
127.0.1.1 mydomain.whatever
10.0.10.20 mydomain.whatever
x.y.z.x mydomain.whatever

It’s on a LAN with 10.0.10.0/24 and has a public x.y.z.x representing a public IP.

Anyone know how to kick the ssl renewal piece into gear for the server to recheck and install it?

Thanks!

At a guess your firewall somehow.

You should be able to connect from an external IP to

http://your.domain/.well-known/acme-challenge

That’s the URL that Letsencrypt will look for.

If you can’t then that’s what you need to fix.