Seems there’s an issue with Let’s Encrypt on this server. For reasons unknown the cert will not renew, and you get a maximum of 10 retries per day per domain, which have now been exhausted.
We could work around this by purchasing a cert elsewhere (relatively cheaply - see below), which would alleviate this issue.
I’ve used these certs before, and they are trustworthy and work. I’ll also see if I can get the LE certification into a workable state in the meantime. Personally, I’m not a fan of LE as it is problematic to say the least.
@phenomlab said in NodeBB - Created pages not found?:
Seems there’s an issue with Let’s Encrypt on this server. For reasons unknown the cert will not renew, and you get a maximum of 10 retries per day per domain, which have now been exhausted.
We could work around this by purchasing a cert elsewhere (relatively cheaply - see below), which would alleviate this issue.
I’ve used these certs before, and they are trustworthy and work. I’ll also see if I can get the LE certification into a workable state in the meantime. Personally, I’m not a fan of LE as it is problematic to say the least.
Thanks for digging into all that.
That’s a massive shame that the free attempts have been exhausted.
So the alternative is to find a different provider?
@jac No - you could wait until the following day, and try again, but it does mean that you need to ensure everything is setup correctly.
@phenomlab it looks like I’m probably best buying one do you think? not that I want to of course! 
@jac Well, there’s a couple of choices. I now have this working from the CERTBOT perspective, so I think that this will work once the retries counter has been reset. So
Up to you.
Another option is to route the domain via Cloudflare. This will provide a free certificate, but does come at a price in the sense that it will impact the websocket server to the point where the direct socket doesn’t work, and will fall back to XMLHTTP.
If you’re willing to go down this route, I can facilitate
@phenomlab said in NodeBB - Created pages not found?:
You wait until the retry counter is reset (typically next day) then attempt to renew the cert then
Probably the most logical I guess.
@phenomlab said in NodeBB - Created pages not found?:
Another option is to route the domain via Cloudflare. This will provide a free certificate, but does come at a price in the sense that it will impact the websocket server to the point where the direct socket doesn’t work, and will fall back to XMLHTTP.
If you’re willing to go down this route, I can facilitate
Is this a sensible option as in will it slow the forum down / increase loading time?
@jac No, quite the opposite in fact
@phenomlab Great!
Is there any risk with doing that then?
@jac No, not really. I’ll do it now.
@phenomlab Many thanks pal 
@jac As you do not have a Cloudflare account, we will need to create one - or, I can tack your domain onto my account meaning I will be responsible for it.
Up to you.
Before we go down this route, I’m going to wait an hour to see if I can renew the LE cert.
@phenomlab Absolutely no problem pal 
.
@phenomlab said in NodeBB - Created pages not found?:
As you do not have a Cloudflare account, we will need to create one - or, I can tack your domain onto my account meaning I will be responsible for it.
Up to you.
Having read the last message sent, if you do go down this route I am more than happy for it to be added to your account, but only if you are, or I can create my own.
@jac said in NodeBB - Created pages not found?:
Having read the last message sent, if you do go down this route I am more than happy for it to be added to your account, but only if you are, or I can create my own.
Ok, no issues. I’ll add it to my account - but only if the LE renewal fails
@jac I just managed to renew the cert You’re back in the game…
@phenomlab said in NodeBB - Created pages not found?:
I just managed to renew the cert You’re back in the game…
Brilliant!
Many thanks Mark, how did you manage that? 
@jac I noticed that the .well-known directories for LE had been deleted from your default web server path, so I recreated them and forced a renew
