[solved] Let's Encrypt SSL not working after manually altering the Nginx configuration

Discussion in 'Installation/Configuration' started by yasine, Jun 15, 2025.

  1. yasine

    yasine Member

    I've installed ISPConfig using the autoinstaller with the following cmd :
    Code:
    wget -O - https://get.ispconfig.org | sh -s -- --use-nginx --no-dns --no-mail --use-ftp-ports=40110-40210 --unattended-upgrades
    , all is working fine except Let's Encrypt SSL

    the result of reports :


    Code:
    ##### SERVER #####
IP-address (as per hostname): ***.***.***.***
[WARN] could not determine server's ip address by ifconfig
[INFO] OS version is Debian GNU/Linux 12 (bookworm)

[INFO] uptime:  15:02:44 up 16:45,  1 user,  load average: 0.01, 0.02, 0.00

[INFO] memory:
               total        used        free      shared  buff/cache   available
Mem:           3.7Gi       2.2Gi       844Mi        69Mi       1.0Gi       1.5Gi
Swap:             0B          0B          0B

[INFO] systemd failed services status:
  UNIT LOAD ACTIVE SUB DESCRIPTION
0 loaded units listed.

[INFO] ISPConfig is installed.
[WARN] /usr/local/ispconfig/server/lib/config.inc.php is missing.

##### VERSION CHECK #####

[INFO] php (cli) version is 8.2.28
[INFO] php-cgi (used for cgi php in default vhost!) is version 8.2.28

##### PORT CHECK #####

[WARN] Port 143 (IMAP server) seems NOT to be listening
[WARN] Port 993 (IMAP server SSL) seems NOT to be listening
[WARN] Port 110 (POP3 server) seems NOT to be listening
[WARN] Port 995 (POP3 server SSL) seems NOT to be listening
[WARN] Port 465 (SMTP server SSL) seems NOT to be listening

##### MAIL SERVER CHECK #####

[WARN] I found no "submission" entry in your postfix master.cf
[INFO] this is not critical, but if you want to offer port 587 for smtp connections you have to enable this.
[WARN] I found no "smtps" entry in your postfix master.cf
[INFO] this is not critical, but if you want to offer SSL for smtp (not TLS) connections you have to enable this.

##### RUNNING SERVER PROCESSES #####

[WARN] I could not determine which web server is running.
[WARN] I could not determine which mail server is running.
[WARN] I could not determine which pop3 server is running.
[WARN] I could not determine which imap server is running.
[WARN] I could not determine which ftp server is running.

##### LISTENING PORTS #####
(only           ()
Local           (Address)
[localhost]:25          (-)
[localhost]:53          (-)
[localhost]:53          (-)
[anywhere]:22           (-)
[anywhere]:21           (-)
[anywhere]:80           (-)
[anywhere]:443          (-)
[localhost]:11211               (-)
[localhost]:953         (-)
[localhost]:953         (-)
[anywhere]:3306         (-)
***.***.***.***:53              (-)
***.***.***.***:53              (-)
[anywhere]:8080         (-)
[anywhere]:8081         (-)
*:*:*:*::*:22           (-)
*:*:*:*::*:21           (-)
*:*:*:*::*:80           (-)
*:*:*:*::*:443          (-)
*:*:*:*::*:953          (-)
*:*:*:*::*:953          (-)
*:*:*:*::*:53           (-)
*:*:*:*::*:53           (-)
*:*:*:*::*:25           (-)
*:*:*:*::*:3306         (-)
*:*:*:*::*a:53          (-)
*:*:*:*::*a:53          (-)
*:*:*:*::*:8080         (-)
*:*:*:*::*:8081         (-)
*:*:*:*::*f816:3eff:fe85:53             (-)
*:*:*:*::*f816:3eff:fe85:53             (-)




##### IPTABLES #####




##### LET'S ENCRYPT #####
    the only active firewall
    upload_2025-6-15_16-13-13.png
     
    yasine, Jun 15, 2025
    #1
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    till, Jun 15, 2025
    #2
  3. yasine

    yasine Member

    I've applied all steps mentioned still the same problem, this is a fresh install for v3.3 and it uses acme.sh, here is the log of
    Code:
    [Sun Jun 15 17:22:09 UTC 2025] Please check log file for more details: /var/log/ispconfig/acme.log
[Sun Jun 15 17:22:09 UTC 2025] _chk_vlist='ilyasine.com#x9bIVOq23-CJmvF-vHCCjrzjnUFWYSrwbTimtbtiqqg.3eFM3w7OakefVe08lKq1ZWL5FSQ4l5QfMqGCgVF2PGA#https://acme-v02.api.letsencrypt.org/acme/chall/2464888542/536642119912/CJtz0w#http-01#/usr/local/ispconfig/interface/acme#https://acme-v02.api.letsencrypt.org/acme/authz/2464888542/536642119912,www.ilyasine.com#yav9hdH3L29-jVS1goiPQVJaUPEARpYFxYNF5SfK0bo.3eFM3w7OakefVe08lKq1ZWL5FSQ4l5QfMqGCgVF2PGA#https://acme-v02.api.letsencrypt.org/acme/chall/2464888542/536642120022/YMgyCA#http-01#/usr/local/ispconfig/interface/acme#https://acme-v02.api.letsencrypt.org/acme/authz/2464888542/536642120022,'
[Sun Jun 15 17:22:09 UTC 2025] start to deactivate authz
[Sun Jun 15 17:22:09 UTC 2025] Trigger domain validation.
[Sun Jun 15 17:22:09 UTC 2025] _t_url='https://acme-v02.api.letsencrypt.org/acme/chall/2464888542/536642119912/CJtz0w'
[Sun Jun 15 17:22:09 UTC 2025] _t_key_authz='x9bIVOq23-CJmvF-vHCCjrzjnUFWYSrwbTimtbtiqqg.3eFM3w7OakefVe08lKq1ZWL5FSQ4l5QfMqGCgVF2PGA'
[Sun Jun 15 17:22:09 UTC 2025] _t_vtype
[Sun Jun 15 17:22:09 UTC 2025] =======Sending Signed Request=======
[Sun Jun 15 17:22:09 UTC 2025] url='https://acme-v02.api.letsencrypt.org/acme/chall/2464888542/536642119912/CJtz0w'
[Sun Jun 15 17:22:09 UTC 2025] payload='{}'
[Sun Jun 15 17:22:09 UTC 2025] Use cached jwk for file: /root/.acme.sh/ca/acme-v02.api.letsencrypt.org/directory/account.key
[Sun Jun 15 17:22:09 UTC 2025] Use _CACHED_NONCE='3seRXrEQBLiQkKF0WfJB1dbLiib2P8LFQPQCnrKKj3Dv-OQ_oE0'
[Sun Jun 15 17:22:09 UTC 2025] nonce='3seRXrEQBLiQkKF0WfJB1dbLiib2P8LFQPQCnrKKj3Dv-OQ_oE0'
[Sun Jun 15 17:22:09 UTC 2025] _URGLY_PRINTF
[Sun Jun 15 17:22:09 UTC 2025] xargs
[Sun Jun 15 17:22:09 UTC 2025] POST
[Sun Jun 15 17:22:09 UTC 2025] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall/2464888542/536642119912/CJtz0w'
[Sun Jun 15 17:22:09 UTC 2025] body='{"protected": "eyJub25jZSI6ICIzc2VSWHJFUUJMaVFrS0YwV2ZKQjFkYkxpaWIyUDhMRlFQUUNucktLajNEdi1PUV9vRTAiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzI0NjQ4ODg1NDIvNTM2NjQyMTE5OTEyL0NKdHowdyIsICJhbGciOiAiRVMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjQ2NDg4ODU0MiJ9", "payload": "e30", "signature": "CWsZa8jmNgva6dgVHL2Ffxxaou9CXyYUCrQ5NcFyX06ppvP757qxprcE5b2nZHhTLmlJ9xQjwIfXOuWTYEmRzQ"}'
[Sun Jun 15 17:22:09 UTC 2025] _postContentType='application/jose+json'
[Sun Jun 15 17:22:09 UTC 2025] Http already initialized.
[Sun Jun 15 17:22:09 UTC 2025] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
[Sun Jun 15 17:22:09 UTC 2025] _ret='0'
[Sun Jun 15 17:22:09 UTC 2025] responseHeaders='HTTP/2 400
server: nginx
date: Sun, 15 Jun 2025 17:22:09 GMT
content-type: application/problem+json
content-length: 144
boulder-requester: 2464888542
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
replay-nonce: ZNp5bV-rYm-7jFSG-4D-luCt8QrYZIYx78OY0vIkMSNy4ACxH68
'
[Sun Jun 15 17:22:09 UTC 2025] code='400'
[Sun Jun 15 17:22:09 UTC 2025] original='{
  "type": "urn:ietf:params:acme:error:malformed",
  "detail": "Unable to update challenge :: authorization must be pending",
  "status": 400
}'
[Sun Jun 15 17:22:09 UTC 2025] response='{
  "type": "urn:ietf:params:acme:error:malformed",
  "detail": "Unable to update challenge :: authorization must be pending",
  "status": 400
}'
[Sun Jun 15 17:22:09 UTC 2025] Trigger domain validation.
[Sun Jun 15 17:22:09 UTC 2025] _t_url='https://acme-v02.api.letsencrypt.org/acme/chall/2464888542/536642120022/YMgyCA'
[Sun Jun 15 17:22:09 UTC 2025] _t_key_authz='yav9hdH3L29-jVS1goiPQVJaUPEARpYFxYNF5SfK0bo.3eFM3w7OakefVe08lKq1ZWL5FSQ4l5QfMqGCgVF2PGA'
[Sun Jun 15 17:22:09 UTC 2025] _t_vtype
[Sun Jun 15 17:22:09 UTC 2025] =======Sending Signed Request=======
[Sun Jun 15 17:22:09 UTC 2025] url='https://acme-v02.api.letsencrypt.org/acme/chall/2464888542/536642120022/YMgyCA'
[Sun Jun 15 17:22:09 UTC 2025] payload='{}'
[Sun Jun 15 17:22:09 UTC 2025] Use cached jwk for file: /root/.acme.sh/ca/acme-v02.api.letsencrypt.org/directory/account.key
[Sun Jun 15 17:22:09 UTC 2025] Use _CACHED_NONCE='ZNp5bV-rYm-7jFSG-4D-luCt8QrYZIYx78OY0vIkMSNy4ACxH68'
[Sun Jun 15 17:22:09 UTC 2025] nonce='ZNp5bV-rYm-7jFSG-4D-luCt8QrYZIYx78OY0vIkMSNy4ACxH68'
[Sun Jun 15 17:22:10 UTC 2025] _URGLY_PRINTF
[Sun Jun 15 17:22:10 UTC 2025] xargs
[Sun Jun 15 17:22:10 UTC 2025] POST
[Sun Jun 15 17:22:10 UTC 2025] _post_url='https://acme-v02.api.letsencrypt.org/acme/chall/2464888542/536642120022/YMgyCA'
[Sun Jun 15 17:22:10 UTC 2025] body='{"protected": "eyJub25jZSI6ICJaTnA1YlYtclltLTdqRlNHLTRELWx1Q3Q4UXJZWklZeDc4T1kwdklrTVNOeTRBQ3hINjgiLCAidXJsIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2NoYWxsLzI0NjQ4ODg1NDIvNTM2NjQyMTIwMDIyL1lNZ3lDQSIsICJhbGciOiAiRVMyNTYiLCAia2lkIjogImh0dHBzOi8vYWNtZS12MDIuYXBpLmxldHNlbmNyeXB0Lm9yZy9hY21lL2FjY3QvMjQ2NDg4ODU0MiJ9", "payload": "e30", "signature": "tATcJ-GTOdU7ZMS3rqBMa4I_y-vXOk4Q2ohUX_hxkogSudaiPB79LnFdePnu_c8haIHpOqUeD94tT5Cuh_G9xA"}'
[Sun Jun 15 17:22:10 UTC 2025] _postContentType='application/jose+json'
[Sun Jun 15 17:22:10 UTC 2025] Http already initialized.
[Sun Jun 15 17:22:10 UTC 2025] _CURL='curl --silent --dump-header /root/.acme.sh/http.header  -L  -g '
[Sun Jun 15 17:22:10 UTC 2025] _ret='0'
[Sun Jun 15 17:22:10 UTC 2025] responseHeaders='HTTP/2 200
server: nginx
date: Sun, 15 Jun 2025 17:22:10 GMT
content-type: application/json
content-length: 195
boulder-requester: 2464888542
cache-control: public, max-age=0, no-cache
link: <https://acme-v02.api.letsencrypt.org/directory>;rel="index"
link: <https://acme-v02.api.letsencrypt.org/acme/authz/2464888542/536642120022>;rel="up"
location: https://acme-v02.api.letsencrypt.org/acme/chall/2464888542/536642120022/YMgyCA
replay-nonce: J1s5b30k9oKY8CZgHXxX-HGeior5-v9mnkadAIjlWGmv9o6fTPg
x-frame-options: DENY
strict-transport-security: max-age=604800
'
[Sun Jun 15 17:22:10 UTC 2025] code='200'
[Sun Jun 15 17:22:10 UTC 2025] original='{
  "type": "http-01",
  "url": "https://acme-v02.api.letsencrypt.org/acme/chall/2464888542/536642120022/YMgyCA",
  "status": "pending",
  "token": "yav9hdH3L29-jVS1goiPQVJaUPEARpYFxYNF5SfK0bo"
}'
[Sun Jun 15 17:22:10 UTC 2025] response='{"type":"http-01","url":"https://acme-v02.api.letsencrypt.org/acme/chall/2464888542/536642120022/YMgyCA","status":"pending","token":"yav9hdH3L29-jVS1goiPQVJaUPEARpYFxYNF5SfK0bo"}'
    the domain that fail for registring Let's Encrypt SSL is ilyasine.com , which is hosted inside cloudflare ( without proxy )

    upload_2025-6-15_18-30-34.png

    upload_2025-6-15_18-31-24.png
     

    Attached Files:

    yasine, Jun 15, 2025
    #3
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    Please post the debug output as requested in the FAQ.
     
    till, Jun 15, 2025
    #4
  5. yasine

    yasine Member

    Code:
    15.06.2025-20:54 - DEBUG [z php fpm incron reload plugin.inc:31] - You must install incron in order to use this plugin
15.06.2025-20:54 - DEBUG [plugins.inc:155] - Calling function 'check_phpini_changes' from plugin 'webserver_plugin' raised by action 'server_plugins_loaded'.
15.06.2025-20:54 - DEBUG [server:224] - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock
finished server.php.
    upload_2025-6-15_21-58-49.png

    systemlog from ISPConfig Monitor :


    Code:
    2025-06-15T20:41:01.733764+00:00 azure systemd[1]: Reloaded nginx.service - A high performance web server and a reverse proxy server.
2025-06-15T20:41:08.052985+00:00 azure kernel: [80612.864256] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:85:ae:01:62:c9:18:27:05:44:08:00 SRC=176.65.148.175 DST=152.228.218.74 LEN=40 TOS=0x00 PREC=0x20 TTL=240 ID=54321 PROTO=TCP SPT=37821 DPT=81 WINDOW=65535 RES=0x00 SYN URGP=0
2025-06-15T20:41:21.424439+00:00 azure kernel: [80626.231505] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:85:ae:01:62:c9:18:27:05:44:08:00 SRC=91.196.152.6 DST=152.228.218.74 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=12670 DF PROTO=TCP SPT=7709 DPT=8015 WINDOW=5840 RES=0x00 SYN URGP=0
2025-06-15T20:41:40.595078+00:00 azure kernel: [80645.406765] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:85:ae:01:62:c9:18:27:05:44:08:00 SRC=79.124.62.126 DST=152.228.218.74 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=33687 PROTO=TCP SPT=0 DPT=3478 WINDOW=1024 RES=0x00 SYN URGP=0
2025-06-15T20:42:01.835680+00:00 azure CRON[225912]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
2025-06-15T20:42:01.837856+00:00 azure CRON[225915]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
2025-06-15T20:42:05.181292+00:00 azure kernel: [80669.990650] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:85:ae:01:62:c9:18:27:05:44:08:00 SRC=152.230.136.66 DST=152.228.218.74 LEN=40 TOS=0x00 PREC=0x20 TTL=43 ID=6712 PROTO=TCP SPT=52807 DPT=23 WINDOW=10687 RES=0x00 SYN URGP=0
2025-06-15T20:42:24.616496+00:00 azure kernel: [80689.427346] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:85:ae:01:62:c9:18:27:05:44:08:00 SRC=46.101.83.143 DST=152.228.218.74 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=54321 PROTO=TCP SPT=39241 DPT=36209 WINDOW=65535 RES=0x00 SYN URGP=0
2025-06-15T20:42:38.915482+00:00 azure kernel: [80703.725049] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:85:ae:01:62:c9:18:27:05:44:08:00 SRC=204.76.203.206 DST=152.228.218.74 LEN=40 TOS=0x00 PREC=0x20 TTL=240 ID=54321 PROTO=TCP SPT=42209 DPT=4719 WINDOW=65535 RES=0x00 SYN URGP=0
2025-06-15T20:43:01.072267+00:00 azure CRON[225940]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
2025-06-15T20:43:01.075659+00:00 azure CRON[225943]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
2025-06-15T20:43:02.011340+00:00 azure kernel: [80726.819185] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:85:ae:01:62:c9:18:27:05:44:08:00 SRC=78.128.112.86 DST=152.228.218.74 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=28849 PROTO=TCP SPT=8080 DPT=33906 WINDOW=1024 RES=0x00 SYN URGP=0
2025-06-15T20:43:22.712007+00:00 azure kernel: [80747.510179] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:85:ae:01:62:c9:18:27:05:44:08:00 SRC=36.7.107.206 DST=152.228.218.74 LEN=40 TOS=0x00 PREC=0x00 TTL=233 ID=42361 PROTO=TCP SPT=57233 DPT=8088 WINDOW=1024 RES=0x00 SYN URGP=0
2025-06-15T20:43:49.760675+00:00 azure kernel: [80774.572367] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:85:ae:01:62:c9:18:27:05:44:08:00 SRC=91.230.168.107 DST=152.228.218.74 LEN=60 TOS=0x00 PREC=0x00 TTL=44 ID=64585 DF PROTO=TCP SPT=37599 DPT=8082 WINDOW=5840 RES=0x00 SYN URGP=0
2025-06-15T20:44:01.287713+00:00 azure CRON[225973]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
2025-06-15T20:44:01.288192+00:00 azure CRON[225974]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
2025-06-15T20:44:01.520948+00:00 azure systemd[1]: Reloading nginx.service - A high performance web server and a reverse proxy server...
2025-06-15T20:44:01.553152+00:00 azure nginx[226002]: 2025/06/15 20:44:01 [warn] 226002#226002: conflicting server name "azure.ilyasine.com" on 0.0.0.0:80, ignored
2025-06-15T20:44:01.555088+00:00 azure nginx[226002]: 2025/06/15 20:44:01 [warn] 226002#226002: conflicting server name "azure.ilyasine.com" on [::]:80, ignored
2025-06-15T20:44:01.555150+00:00 azure nginx[226002]: 2025/06/15 20:44:01 [notice] 226002#226002: signal process started
2025-06-15T20:44:01.555210+00:00 azure systemd[1]: Reloaded nginx.service - A high performance web server and a reverse proxy server.
2025-06-15T20:44:04.192866+00:00 azure kernel: [80789.000189] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:85:ae:01:62:c9:18:27:05:44:08:00 SRC=104.236.209.11 DST=152.228.218.74 LEN=52 TOS=0x00 PREC=0x00 TTL=45 ID=15061 PROTO=TCP SPT=60389 DPT=8146 WINDOW=65535 RES=0x00 SYN URGP=0
2025-06-15T20:44:29.328602+00:00 azure kernel: [80814.136770] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:85:ae:01:62:c9:18:27:05:44:08:00 SRC=134.209.173.54 DST=152.228.218.74 LEN=52 TOS=0x00 PREC=0x00 TTL=46 ID=34381 PROTO=TCP SPT=41671 DPT=8175 WINDOW=65535 RES=0x00 SYN URGP=0
2025-06-15T20:44:53.684501+00:00 azure kernel: [80838.493271] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:85:ae:01:62:c9:18:27:05:44:08:00 SRC=198.235.24.67 DST=152.228.218.74 LEN=44 TOS=0x00 PREC=0x00 TTL=236 ID=12291 PROTO=TCP SPT=54223 DPT=2323 WINDOW=1024 RES=0x00 SYN URGP=0
2025-06-15T20:45:01.657630+00:00 azure CRON[226012]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
2025-06-15T20:45:01.659335+00:00 azure CRON[226013]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
2025-06-15T20:45:20.465026+00:00 azure kernel: [80865.270897] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:85:ae:01:62:c9:18:27:05:44:08:00 SRC=170.39.218.156 DST=152.228.218.74 LEN=40 TOS=0x00 PREC=0x00 TTL=240 ID=54321 PROTO=TCP SPT=45797 DPT=8728 WINDOW=65535 RES=0x00 SYN URGP=0
2025-06-15T20:45:27.252712+00:00 azure kernel: [80872.061912] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:85:ae:01:62:c9:18:27:05:44:08:00 SRC=83.222.191.2 DST=152.228.218.74 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=21141 PROTO=TCP SPT=50512 DPT=9978 WINDOW=1024 RES=0x00 SYN URGP=0
2025-06-15T20:45:40.002063+00:00 azure kernel: [80884.810054] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:85:ae:01:62:c9:18:27:05:44:08:00 SRC=79.124.62.126 DST=152.228.218.74 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=37105 PROTO=TCP SPT=0 DPT=50000 WINDOW=1024 RES=0x00 SYN URGP=0
2025-06-15T20:46:01.565118+00:00 azure CRON[226134]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
2025-06-15T20:46:01.565710+00:00 azure CRON[226135]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
2025-06-15T20:46:14.072723+00:00 azure kernel: [80918.874410] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:85:ae:01:62:c9:18:27:05:44:08:00 SRC=198.235.24.201 DST=152.228.218.74 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=54321 PROTO=TCP SPT=57244 DPT=102 WINDOW=65535 RES=0x00 SYN URGP=0
2025-06-15T20:46:46.332893+00:00 azure kernel: [80951.134254] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:85:ae:01:62:c9:18:27:05:44:08:00 SRC=83.222.191.2 DST=152.228.218.74 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=56003 PROTO=TCP SPT=50512 DPT=6902 WINDOW=1024 RES=0x00 SYN URGP=0
2025-06-15T20:46:52.249851+00:00 azure systemd[1]: session-2746.scope: Deactivated successfully.
2025-06-15T20:46:54.512981+00:00 azure kernel: [80959.322687] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:85:ae:01:62:c9:18:27:05:44:08:00 SRC=147.185.133.63 DST=152.228.218.74 LEN=44 TOS=0x00 PREC=0x00 TTL=240 ID=54321 PROTO=TCP SPT=53655 DPT=9840 WINDOW=65535 RES=0x00 SYN URGP=0
2025-06-15T20:47:01.843548+00:00 azure CRON[226167]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
2025-06-15T20:47:01.846264+00:00 azure CRON[226168]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
2025-06-15T20:47:02.384932+00:00 azure systemd[1]: Stopping [email protected] - User Manager for UID 1000...
2025-06-15T20:47:02.385248+00:00 azure systemd[224816]: Activating special unit exit.target...
2025-06-15T20:47:02.385332+00:00 azure systemd[224816]: Stopped target default.target - Main User Target.
2025-06-15T20:47:02.385426+00:00 azure systemd[224816]: Stopped target basic.target - Basic System.
2025-06-15T20:47:02.385496+00:00 azure systemd[224816]: Stopped target paths.target - Paths.
2025-06-15T20:47:02.385560+00:00 azure systemd[224816]: Stopped target sockets.target - Sockets.
2025-06-15T20:47:02.385625+00:00 azure systemd[224816]: Stopped target timers.target - Timers.
2025-06-15T20:47:02.385692+00:00 azure systemd[224816]: Closed dirmngr.socket - GnuPG network certificate management daemon.
2025-06-15T20:47:02.385758+00:00 azure systemd[224816]: Closed gpg-agent-browser.socket - GnuPG cryptographic agent and passphrase cache (access for web browsers).
2025-06-15T20:47:02.385831+00:00 azure systemd[224816]: Closed gpg-agent-extra.socket - GnuPG cryptographic agent and passphrase cache (restricted).
2025-06-15T20:47:02.385897+00:00 azure systemd[224816]: Closed gpg-agent-ssh.socket - GnuPG cryptographic agent (ssh-agent emulation).
2025-06-15T20:47:02.385963+00:00 azure systemd[224816]: Closed gpg-agent.socket - GnuPG cryptographic agent and passphrase cache.
2025-06-15T20:47:02.386028+00:00 azure systemd[224816]: Closed pk-debconf-helper.socket - debconf communication socket.
2025-06-15T20:47:02.386091+00:00 azure systemd[224816]: Removed slice app.slice - User Application Slice.
2025-06-15T20:47:02.386151+00:00 azure systemd[224816]: Reached target shutdown.target - Shutdown.
2025-06-15T20:47:02.386224+00:00 azure systemd[224816]: Finished systemd-exit.service - Exit the Session.
2025-06-15T20:47:02.386289+00:00 azure systemd[224816]: Reached target exit.target - Exit the Session.
2025-06-15T20:47:02.406071+00:00 azure systemd[1]: [email protected]: Deactivated successfully.
2025-06-15T20:47:02.406294+00:00 azure systemd[1]: Stopped [email protected] - User Manager for UID 1000.
2025-06-15T20:47:02.489684+00:00 azure systemd[1]: Stopping [email protected] - User Runtime Directory /run/user/1000...
2025-06-15T20:47:02.501057+00:00 azure systemd[1]: run-user-1000.mount: Deactivated successfully.
2025-06-15T20:47:02.503155+00:00 azure systemd[1]: [email protected]: Deactivated successfully.
2025-06-15T20:47:02.503715+00:00 azure systemd[1]: Stopped [email protected] - User Runtime Directory /run/user/1000.
2025-06-15T20:47:02.507043+00:00 azure systemd[1]: Removed slice user-1000.slice - User Slice of UID 1000.
2025-06-15T20:47:04.869242+00:00 azure kernel: [80969.674783] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:85:ae:01:62:c9:18:27:05:44:08:00 SRC=80.82.77.202 DST=152.228.218.74 LEN=40 TOS=0x00 PREC=0x20 TTL=240 ID=48846 PROTO=TCP SPT=60000 DPT=2525 WINDOW=1024 RES=0x00 SYN URGP=0
2025-06-15T20:47:25.815893+00:00 azure systemd[1]: Created slice user-1000.slice - User Slice of UID 1000.
2025-06-15T20:47:25.820940+00:00 azure systemd[1]: Starting [email protected] - User Runtime Directory /run/user/1000...
2025-06-15T20:47:25.834061+00:00 azure systemd[1]: Finished [email protected] - User Runtime Directory /run/user/1000.
2025-06-15T20:47:25.837691+00:00 azure systemd[1]: Starting [email protected] - User Manager for UID 1000...
2025-06-15T20:47:25.964735+00:00 azure systemd[226244]: Queued start job for default target default.target.
2025-06-15T20:47:25.985920+00:00 azure systemd[226244]: Created slice app.slice - User Application Slice.
2025-06-15T20:47:25.986360+00:00 azure systemd[226244]: Reached target paths.target - Paths.
2025-06-15T20:47:25.986708+00:00 azure systemd[226244]: Reached target timers.target - Timers.
2025-06-15T20:47:25.987212+00:00 azure systemd[226244]: Listening on dirmngr.socket - GnuPG network certificate management daemon.
2025-06-15T20:47:25.987617+00:00 azure systemd[226244]: Listening on gpg-agent-browser.socket - GnuPG cryptographic agent and passphrase cache (access for web browsers).
2025-06-15T20:47:25.988105+00:00 azure systemd[226244]: Listening on gpg-agent-extra.socket - GnuPG cryptographic agent and passphrase cache (restricted).
2025-06-15T20:47:25.988548+00:00 azure systemd[226244]: Listening on gpg-agent-ssh.socket - GnuPG cryptographic agent (ssh-agent emulation).
2025-06-15T20:47:25.989140+00:00 azure systemd[226244]: Listening on gpg-agent.socket - GnuPG cryptographic agent and passphrase cache.
2025-06-15T20:47:25.989590+00:00 azure systemd[226244]: Listening on pk-debconf-helper.socket - debconf communication socket.
2025-06-15T20:47:25.989836+00:00 azure systemd[226244]: Reached target sockets.target - Sockets.
2025-06-15T20:47:25.990123+00:00 azure systemd[226244]: Reached target basic.target - Basic System.
2025-06-15T20:47:25.991821+00:00 azure systemd[1]: Started [email protected] - User Manager for UID 1000.
2025-06-15T20:47:25.991979+00:00 azure systemd[226244]: Reached target default.target - Main User Target.
2025-06-15T20:47:25.992091+00:00 azure systemd[226244]: Startup finished in 137ms.
2025-06-15T20:47:25.992192+00:00 azure systemd[1]: Started session-2783.scope - Session 2783 of User debian.
2025-06-15T20:47:36.411377+00:00 azure kernel: [81001.211957] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:85:ae:01:62:c9:18:27:05:44:08:00 SRC=167.94.146.40 DST=152.228.218.74 LEN=60 TOS=0x00 PREC=0x00 TTL=50 ID=3928 PROTO=TCP SPT=11215 DPT=33820 WINDOW=42340 RES=0x00 SYN URGP=0
2025-06-15T20:48:00.304557+00:00 azure kernel: [81025.113115] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:85:ae:01:62:c9:18:27:05:44:08:00 SRC=152.32.183.231 DST=152.228.218.74 LEN=60 TOS=0x08 PREC=0x20 TTL=41 ID=3196 DF PROTO=TCP SPT=45176 DPT=60016 WINDOW=29200 RES=0x00 SYN URGP=0
2025-06-15T20:48:01.227714+00:00 azure CRON[226275]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
2025-06-15T20:48:01.229879+00:00 azure CRON[226276]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
2025-06-15T20:48:14.711497+00:00 azure kernel: [81039.510883] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:85:ae:01:62:c9:18:27:05:44:08:00 SRC=79.124.62.126 DST=152.228.218.74 LEN=40 TOS=0x00 PREC=0x00 TTL=238 ID=25257 PROTO=TCP SPT=0 DPT=5012 WINDOW=1024 RES=0x00 SYN URGP=0
2025-06-15T20:48:37.150450+00:00 azure kernel: [81061.952599] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:85:ae:01:62:c9:18:27:05:44:08:00 SRC=185.242.226.47 DST=152.228.218.74 LEN=44 TOS=0x00 PREC=0x20 TTL=240 ID=54321 PROTO=TCP SPT=54136 DPT=3702 WINDOW=65535 RES=0x00 SYN URGP=0
2025-06-15T20:48:42.143836+00:00 azure kernel: [81066.948364] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:85:ae:01:62:c9:18:27:05:44:08:00 SRC=198.235.24.226 DST=152.228.218.74 LEN=44 TOS=0x00 PREC=0x00 TTL=242 ID=39697 PROTO=TCP SPT=51603 DPT=3000 WINDOW=1024 RES=0x00 SYN URGP=0
2025-06-15T20:49:01.466111+00:00 azure CRON[226308]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
2025-06-15T20:49:01.468724+00:00 azure CRON[226311]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
2025-06-15T20:49:01.740950+00:00 azure systemd[1]: Reloading nginx.service - A high performance web server and a reverse proxy server...
2025-06-15T20:49:01.771371+00:00 azure nginx[226358]: 2025/06/15 20:49:01 [warn] 226358#226358: conflicting server name "azure.ilyasine.com" on 0.0.0.0:80, ignored
2025-06-15T20:49:01.771568+00:00 azure nginx[226358]: 2025/06/15 20:49:01 [warn] 226358#226358: conflicting server name "azure.ilyasine.com" on [::]:80, ignored
2025-06-15T20:49:01.771690+00:00 azure nginx[226358]: 2025/06/15 20:49:01 [notice] 226358#226358: signal process started
2025-06-15T20:49:01.776648+00:00 azure systemd[1]: Reloaded nginx.service - A high performance web server and a reverse proxy server.
2025-06-15T20:49:13.223328+00:00 azure kernel: [81098.030763] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:85:ae:01:62:c9:18:27:05:44:08:00 SRC=104.236.209.11 DST=152.228.218.74 LEN=52 TOS=0x00 PREC=0x00 TTL=46 ID=54333 PROTO=TCP SPT=57982 DPT=8154 WINDOW=65535 RES=0x00 SYN URGP=0
2025-06-15T20:49:29.673187+00:00 azure kernel: [81114.478934] [UFW BLOCK] IN=ens3 OUT= MAC=fa:16:3e:85:ae:01:62:c9:18:27:05:44:08:00 SRC=46.101.83.143 DST=152.228.218.74 LEN=40 TOS=0x00 PREC=0x00 TTL=237 ID=54321 PROTO=TCP SPT=36488 DPT=35101 WINDOW=65535 RES=0x00 SYN URGP=0
2025-06-15T20:50:01.878233+00:00 azure CRON[226370]: (root) CMD (/usr/local/ispconfig/server/server.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
2025-06-15T20:50:01.888186+00:00 azure CRON[226377]: (root) CMD (/usr/local/ispconfig/server/cron.sh 2>&1 | while read line; do echo `/bin/date` "$line" >> /var/log/ispconfig/cron.log; done)
    I'm guessing it's a firewall problem, but all the important ports are opened :
    upload_2025-6-15_22-16-44.png
     
    Last edited: Jun 15, 2025
    yasine, Jun 15, 2025
    #5
  6. till

    till Super Moderator Staff Member ISPConfig Developer

    When you debug something on a computer, then you must do the action that you want to debug. Otherwise, you do not get any relevant output from the debug step. You missed enabling Let's Encrypt before running server.sh, so server.sh could not show any debug info for this step.
     
    till, Jun 16, 2025
    #6
  7. yasine

    yasine Member

    Just did it, here is the debug result :
    Code:
     Calling function 'check_phpini_changes' from plugin 'webserver_plugin' raised by action 'server_plugins_loaded'.
Mon Jun 16 14:00:01 UTC 2025 16.06.2025-14:00 - DEBUG [server:184] - Found 1 changes, starting update process.
Mon Jun 16 14:00:01 UTC 2025 16.06.2025-14:00 - DEBUG [plugins.inc:118] - Calling function 'ssl' from plugin 'nginx_plugin' raised by event 'web_domain_update'.
Mon Jun 16 14:00:01 UTC 2025 16.06.2025-14:00 - DEBUG [plugins.inc:118] - Calling function 'update' from plugin 'nginx_plugin' raised by event 'web_domain_update'.
Mon Jun 16 14:00:01 UTC 2025 16.06.2025-14:00 - DEBUG [system.inc:2539] - safe_exec cmd: chattr -i '/var/www/clients/client0/web3' - return code: 0
Mon Jun 16 14:00:01 UTC 2025 16.06.2025-14:00 - DEBUG [system.inc:2539] - safe_exec cmd: chattr +i '/var/www/clients/client0/web3' - return code: 0
Mon Jun 16 14:00:01 UTC 2025 16.06.2025-14:00 - DEBUG [system.inc:2539] - safe_exec cmd: df -T '/var/www/clients/client0/web3'|awk 'END{print $2,$NF}' - return code: 0
Mon Jun 16 14:00:01 UTC 2025 16.06.2025-14:00 - DEBUG [system.inc:2539] - safe_exec cmd: which 'setquota' 2> /dev/null - return code: 0
Mon Jun 16 14:00:01 UTC 2025 16.06.2025-14:00 - DEBUG [system.inc:2539] - safe_exec cmd: setquota -u 'web3' '0' '0' 0 0 -a &> /dev/null - return code: 0
Mon Jun 16 14:00:01 UTC 2025 setquota: Not setting block grace time on /dev/sda1 because softlimit is not exceeded.
Mon Jun 16 14:00:01 UTC 2025 setquota: Not setting inode grace time on /dev/sda1 because softlimit is not exceeded.
Mon Jun 16 14:00:01 UTC 2025 16.06.2025-14:00 - DEBUG [system.inc:2539] - safe_exec cmd: setquota -T -u 'web3' 604800 604800 -a &> /dev/null - return code: 0
Mon Jun 16 14:00:01 UTC 2025 16.06.2025-14:00 - DEBUG [system.inc:2539] - safe_exec cmd: chattr +i '/var/www/clients/client0/web3' - return code: 0
Mon Jun 16 14:00:01 UTC 2025 16.06.2025-14:00 - DEBUG [letsencrypt.inc:74] - acme.sh version is 3.1.2, so using --keylength ec-256 instead of --keylength 4096
Mon Jun 16 14:00:01 UTC 2025 16.06.2025-14:00 - DEBUG [system.inc:2104] - Trying to use Systemd to restart service
Mon Jun 16 14:00:01 UTC 2025 16.06.2025-14:00 - DEBUG [system.inc:2539] - safe_exec cmd: systemctl is-enabled 'nginx' 2>&1 - return code: 0
Mon Jun 16 14:00:01 UTC 2025 16.06.2025-14:00 - DEBUG [letsencrypt.inc:468] - Create Let's Encrypt SSL Cert for ilyasine.com (ECDSA) via acme.sh, domains to include: ilyasine.com, www.ilyasine.com
Mon Jun 16 14:00:01 UTC 2025 16.06.2025-14:00 - DEBUG [system.inc:1830] - exec: R=0 ; C=0 ; /root/.acme.sh/acme.sh --log '/var/log/ispconfig/acme.log' --issue  -d 'ilyasine.com' -d 'www.ilyasine.com' -w /usr/local/ispconfig/interface/acme --always-force-new-domain-key  --ecc --keylength ec-256 ; R=$? ; if [ $R -eq 0 ] || [ $R -eq 2 ]; then : ;   /root/.acme.sh/acme.sh --log '/var/log/ispconfig/acme.log' --install-cert  -d 'ilyasine.com' -d 'www.ilyasine.com' --ecc --key-file '/var/www/clients/client0/web3/ssl/ilyasine.com-le.key' --fullchain-file '/var/www/clients/client0/web3/ssl/ilyasine.com-le.crt' --reloadcmd 'systemctl force-reload nginx.service' ;   C=$? ; fi ; if [ $C -eq 0 ] ;   then exit $R ;   else exit $C ; fi
Mon Jun 16 14:00:09 UTC 2025 [Mon Jun 16 14:00:09 UTC 2025] ilyasine.com: Invalid status. Verification error details: 152.228.218.74: Invalid response from http://ilyasine.com/.well-known/acme-challenge/g7XJ6Wl_R_SWY-r2Pdi8IHHl03vastamJDb7LDngMCo: 404
Mon Jun 16 14:00:09 UTC 2025 [Mon Jun 16 14:00:09 UTC 2025] Please check log file for more details: /var/log/ispconfig/acme.log
Mon Jun 16 14:00:10 UTC 2025 16.06.2025-14:00 - WARNING - Let's Encrypt SSL Cert for ilyasine.com via acme.sh could not be issued. Used command: R=0 ; C=0 ; /root/.acme.sh/acme.sh --log '/var/log/ispconfig/acme.log' --issue  -d 'ilyasine.com' -d 'www.ilyasine.com' -w /usr/local/ispconfig/interface/acme --always-force-new-domain-key  --ecc --keylength ec-256 ; R=$? ; if [ $R -eq 0 ] || [ $R -eq 2 ]; then : ;   /root/.acme.sh/acme.sh --log '/var/log/ispconfig/acme.log' --install-cert  -d 'ilyasine.com' -d 'www.ilyasine.com' --ecc --key-file '/var/www/clients/client0/web3/ssl/ilyasine.com-le.key' --fullchain-file '/var/www/clients/client0/web3/ssl/ilyasine.com-le.crt' --reloadcmd 'systemctl force-reload nginx.service' ;   C=$? ; fi ; if [ $C -eq 0 ] ;   then exit $R ;   else exit $C ; fi
Mon Jun 16 14:00:10 UTC 2025 16.06.2025-14:00 - DEBUG [nginx plugin.inc:1399] - SSL Disabled. ilyasine.com
Mon Jun 16 14:00:10 UTC 2025 16.06.2025-14:00 - DEBUG [system.inc:2539] - safe_exec cmd: nginx -V 2>&1 | grep 'built with OpenSSL' | sed 's/.*built([a-zA-Z ]*)OpenSSL ([0-9.]*).*/2/' - return code: 0
Mon Jun 16 14:00:11 UTC 2025 16.06.2025-14:00 - DEBUG [system.inc:2539] - safe_exec cmd: nginx -V 2>&1 | grep 'running with OpenSSL' | sed 's/.*running([a-zA-Z ]*)OpenSSL ([0-9.]*).*/2/' - return code: 0
Mon Jun 16 14:00:11 UTC 2025 16.06.2025-14:00 - DEBUG [system.inc:2539] - safe_exec cmd: which 'nginx' 2> /dev/null - return code: 0
Mon Jun 16 14:00:11 UTC 2025 16.06.2025-14:00 - DEBUG [nginx plugin.inc:1624] - Enable TLS 1.3 for: ilyasine.com
Mon Jun 16 14:00:11 UTC 2025 16.06.2025-14:00 - DEBUG [system.inc:2539] - safe_exec cmd: which 'nginx' 2> /dev/null - return code: 0
Mon Jun 16 14:00:11 UTC 2025 16.06.2025-14:00 - DEBUG [system.inc:2539] - safe_exec cmd: which 'nginx' 2> /dev/null - return code: 0
Mon Jun 16 14:00:11 UTC 2025 16.06.2025-14:00 - DEBUG [system.inc:2539] - safe_exec cmd: which 'nginx' 2> /dev/null - return code: 0
Mon Jun 16 14:00:11 UTC 2025 16.06.2025-14:00 - DEBUG [nginx plugin.inc:1927] - Writing the vhost file: /etc/nginx/sites-available/ilyasine.com.vhost
Mon Jun 16 14:00:11 UTC 2025 16.06.2025-14:00 - DEBUG [nginx plugin.inc:2028] - nginx status is: running
Mon Jun 16 14:00:11 UTC 2025 16.06.2025-14:00 - DEBUG [services.inc:56] - Calling function 'restartHttpd' from module 'web_module'.
Mon Jun 16 14:00:11 UTC 2025 16.06.2025-14:00 - DEBUG [system.inc:2104] - Trying to use Systemd to restart service
Mon Jun 16 14:00:11 UTC 2025 16.06.2025-14:00 - DEBUG [system.inc:2539] - safe_exec cmd: systemctl is-enabled 'nginx' 2>&1 - return code: 0
Mon Jun 16 14:00:11 UTC 2025 16.06.2025-14:00 - DEBUG [web module.inc:236] - Checking nginx configuration...
Mon Jun 16 14:00:11 UTC 2025 16.06.2025-14:00 - DEBUG [web module.inc:241] - nginx config test failed!
Mon Jun 16 14:00:11 UTC 2025 16.06.2025-14:00 - DEBUG [nginx plugin.inc:2031] - nginx restart return value is: 1
Mon Jun 16 14:00:13 UTC 2025 16.06.2025-14:00 - DEBUG [nginx plugin.inc:2038] - nginx online status after restart is: running
Mon Jun 16 14:00:13 UTC 2025 16.06.2025-14:00 - WARNING - nginx did not restart after the configuration change for website ilyasine.com. Reverting the configuration. Saved non-working config as /etc/nginx/sites-available/ilyasine.com.vhost.err
Mon Jun 16 14:00:13 UTC 2025 16.06.2025-14:00 - WARNING - Reason for nginx restart failure: 2025/06/16 14:00:11 [warn] 429451#429451: conflicting server name "azure.ilyasine.com" on 0.0.0.0:80, ignored
Mon Jun 16 14:00:13 UTC 2025 2025/06/16 14:00:11 [warn] 429451#429451: conflicting server name "azure.ilyasine.com" on [::]:80, ignored
Mon Jun 16 14:00:13 UTC 2025 nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
Mon Jun 16 14:00:13 UTC 2025 2025/06/16 14:00:11 [emerg] 429451#429451: mkdir() "/var/www/clients/client0/web3/webcache" failed (1: Operation not permitted)
Mon Jun 16 14:00:13 UTC 2025 nginx: configuration file /etc/nginx/nginx.conf test failed
Mon Jun 16 14:00:13 UTC 2025 16.06.2025-14:00 - DEBUG [services.inc:56] - Calling function 'restartHttpd' from module 'web_module'.
Mon Jun 16 14:00:13 UTC 2025 16.06.2025-14:00 - DEBUG [system.inc:2104] - Trying to use Systemd to restart service
Mon Jun 16 14:00:13 UTC 2025 16.06.2025-14:00 - DEBUG [system.inc:2539] - safe_exec cmd: systemctl is-enabled 'nginx' 2>&1 - return code: 0
Mon Jun 16 14:00:13 UTC 2025 16.06.2025-14:00 - DEBUG [web module.inc:236] - Checking nginx configuration...
Mon Jun 16 14:00:13 UTC 2025 16.06.2025-14:00 - DEBUG [web module.inc:239] - nginx configuration ok!
Mon Jun 16 14:00:13 UTC 2025 16.06.2025-14:00 - DEBUG [web module.inc:246] - Restarting httpd: systemctl restart nginx.service
Mon Jun 16 14:00:13 UTC 2025 16.06.2025-14:00 - DEBUG [plugins.inc:118] - Calling function 'incronUpdate' from plugin 'z_php_fpm_incron_reload_plugin' raised by event 'web_domain_update'.
Mon Jun 16 14:00:13 UTC 2025 16.06.2025-14:00 - DEBUG [z php fpm incron reload plugin.inc:49] - Document root and PHP version unchanged. Not updating incron configuration.
Mon Jun 16 14:00:13 UTC 2025 16.06.2025-14:00 - DEBUG [modules.inc:240] - Processed datalog_id 60
Mon Jun 16 14:00:13 UTC 2025 16.06.2025-14:00 - DEBUG [server:224] - Remove Lock: /usr/local/ispconfig/server/temp/.ispconfig_lock
Mon Jun 16 14:00:13 UTC 2025 finished server.php.
     
    yasine, Jun 16, 2025
    #7
  8. till

    till Super Moderator Staff Member ISPConfig Developer

    What did you add in the Nginx directives field of that website? Seems as if you added some custom settings that try to create
    /var/www/clients/client0/web3/webcache folder, which can not work as Nginx can not create a folder there, so Nginx can not start and revert to the last working config, which is a config without SSL. If you want Nginx to create a web caching folder, you must e.g., use
    /var/www/clients/client0/web3/tmp/webcache as the tmp folder is writable.
     
    till, Jun 16, 2025
    #8
  9. yasine

    yasine Member

    that's correct , I have figured that just now, it's a problem of nginx conf

    upload_2025-6-16_16-23-4.png

    I've created this : /usr/local/ispconfig/server/conf-custom/nginx_vhost.conf.master , and putted this :
    Code:
    fastcgi_cache_path <tmpl_var name='web_document_root'>cache levels=1:2 keys_zone=<tmpl_var name='domain'>:200m max_size=10g inactive=2h use_temp_path=off;
    to enable fastcgi cache, it was working on other servers, but I don't know why it's failing now
     
    yasine, Jun 16, 2025
    #9
  10. till

    till Super Moderator Staff Member ISPConfig Developer

    This path <tmpl_var name='web_document_root'>cache can not work on an ISPConfig system with folder protection. You must use e.g.
    <tmpl_var name='web_document_root'>tmp/cache
     
    till, Jun 16, 2025
    #10
  11. yasine

    yasine Member

    even after I' ve did it upload_2025-6-16_17-0-55.png

    still the following error :
    upload_2025-6-16_17-4-28.png

    before I did <tmpl_var name='web_document_root'>cache , the error was

    upload_2025-6-16_17-5-20.png
     
    yasine, Jun 16, 2025
    #11
  12. till

    till Super Moderator Staff Member ISPConfig Developer

    Use this:

    <tmpl_var name='web_document_root'>/cache

    As you can see in your path, you missed the /
     
    till, Jun 16, 2025
    #12
  13. yasine

    yasine Member

    even with this still not working , the main problem is :
    conflicting server name
    upload_2025-6-16_18-13-24.png

    when I did :
    Code:
    grep -r "server_name azure.ilyasine.com" /etc/nginx/sites-available
    I got
    Code:
    /etc/nginx/sites-available/azure.ilyasine.com.vhost:        server_name azure.ilyasine.com www.azure.ilyasine.com;
/etc/nginx/sites-available/acme.vhost:          server_name azure.ilyasine.com;
    which means there are multiple server blocks attempting to claim the same hostname and port combination. Nginx doesn't know which one to prioritize, because I have created this website ( the same as hostname )
    upload_2025-6-16_18-17-34.png

    with the following config :
    Code:
    #ISP Config Panel
location ^~ / {
    proxy_set_header X-Forwarded-Host $host:$server_port;
    proxy_set_header X-Forwarded-Server $host;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_pass https://localhost:8080;
}

#Remove index.php
if ($request_uri ~* "^/index\.php/*(.*)") {
    return 301 /$1;
}
    to get rid of port 8080
     
    yasine, Jun 16, 2025
    #13
  14. till

    till Super Moderator Staff Member ISPConfig Developer

    According to the site you posted, it now has a Let's Encrypt certificate. If it does not have one, remove your proxy config from the site and try to enable Let's Encrypt. If it works, then you know that the proxy config you added is at fault here as it does not exclude the let's Encrypt requests from being proxied.

    It doesn't say that this is an issue. See word 'ignored' in that line and a bit below 'syntax ok'.
     
    till, Jun 16, 2025
    #14
    yasine likes this.
  15. yasine

    yasine Member

    Thank you @till , the problem was just a bad custom nginx configuration
     
    yasine, Jun 21, 2025
    #15

Share This Page