GNU bug report logs - #36389
nginx/certbot interaction doesn't work as documented

Previous Next

Full log

View this message in rfc822 format

From: help-debbugs <at> gnu.org (GNU bug Tracking System)
To: Maxim Cournoyer <maxim <at> guixotic.coop>
Cc: tracker <at> debbugs.gnu.org
Subject: bug#36389: closed (nginx/certbot interaction doesn't work as
 documented)
Date: Tue, 08 Jul 2025 16:37:09 +0000

[Message part 1 (text/plain, inline)]

Your message dated Tue, 08 Jul 2025 16:58:20 +0900
with message-id <87zfdfru5f.fsf_-_ <at> guixotic.coop>
and subject line Re: bug#36389: nginx/certbot interaction doesn't work as documented
has caused the debbugs.gnu.org bug report #36389,
regarding nginx/certbot interaction doesn't work as documented
to be marked as done.

(If you believe you have received this mail in error, please contact
help-debbugs <at> gnu.org.)


-- 
36389: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=36389
GNU Bug Tracking System
Contact help-debbugs <at> gnu.org with problems

[Message part 2 (message/rfc822, inline)]

From: Robert Vollmert <rob <at> vllmrt.net>
To: bug-guix <at> gnu.org
Subject: nginx/certbot interaction doesn't work as documented
Date: Wed, 26 Jun 2019 10:39:22 +0200

I’ve tried setting up nginx with certbot on guix. Two immediate issues:

- certbot extends the nginx service to serve challenge files. It appears
  that this nginx service extension conflicts (silently) with an independently
  configured nginx service. I.e., I had nginx previously configured, and
  after adding certbot, my previous nginx kept running with the previous
  configuration (even after herd restart nginx), while there was an additional
  nginx config in the gnu store with the certbot-specific fragments. certbot
  activation called nginx to test that fragment, but apparently never started
  nginx (successfully?). There were no errors.

  After removing the stand-alone nginx service and restarting nginx, it started
  with the certbot configuration.

- After this, /var/lib/certbot/renew worked successfully to register a
  certificate, but then failed when calling the nginx deploy hook that I’d
  copied from the guix certbot documentation, because /var/run/nginx/pid
  doesn’t exist. That might be a bug in the nginx package, not sure. I can’t
  find an nginx pid file anywhere, and no other errors related to it either,
  even though the config file includes
    pid /var/run/nginx/pid;

[Message part 3 (message/rfc822, inline)]

From: Maxim Cournoyer <maxim <at> guixotic.coop>
To: Andreas Enge <andreas <at> enge.fr>
Cc: 36389-done <at> debbugs.gnu.org
Subject: Re: bug#36389: nginx/certbot interaction doesn't work as documented
Date: Tue, 08 Jul 2025 16:58:20 +0900

Hi,

Andreas Enge <andreas <at> enge.fr> writes:

> Actually this seems to be a thing of the service, not nginx itself.
>
> When I stop the service with the old configuration file, manually run
>    /gnu/store/bdhfqs7sx3mal6pzz8z00hw4cpn5dj7x-nginx-1.21.4/sbin/nginx
> -p /var/run/nginx -c new_configuration_file
> kill the process, and "herd restart nginx",
> the herd service uses the old configuration file again.

I'm tentatively closing this, from a fresh experience configuring nginx
and certbot services. I stumbled on a different issue, which I'll
address in a separate patch.

-- 
Thanks,
Maxim

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.