Wie SSL-Zertifikate von ipv64.net in Nginx eintragen?

Bruce · April 24, 2025, 8:08pm

Hallo,

ich betreibe in meinem Homelab über docker einen Nginx proxy Manager und konnte bereits erfolgreich „http“ Einträge erstellen.
Über ipv64.net habe ich mir jetzt eine Domain registriert und weil jetzt nicht was ich machen soll damit ich „https“ Einträge bei mir anlegen kann.

Kann mir bitte jemand helfen?
Danke

sugarle · April 25, 2025, 8:55am

Woran scheitert es denn genau?
Eigentlich musst du nichts weiter tun als dem NPM sagen dass er mit Letsencrypt ein Zertifikat erstellen soll, sofern Letsencrypt genutzt werden soll.

Edit: gibts auch nen Video von Dennis dazu

Bruce · April 26, 2025, 9:03pm

Die zertifikatserstellung durch let’s encrypt schlägt fehl.
Vermutlich, weil ich die Portfreigaben meines Routers nicht geöffnet habe.

Eigentlich möchte ich nur https Domains in meinem Heimnetzwerk ohne etwas nach außen freizugeben. In iOS 18 erhalten http Webseiten nämlich keine Passwortvorausfüllungen mehr.

jklein · April 26, 2025, 9:16pm

Hallo,
mach es mit der DNS Challange dann must du keine Port aufmachen. Und es geht für alle Subdomains

Bruce · April 27, 2025, 1:02pm

Danke für den Screenshot.

Ich bekomme jedoch folgenden Fehler:

Habe als Domain Name folgendes angegeben: *.\DOMAIN.IPV64.DE

Ich gebe als DOMAIN.IPV64.DE schon das an, was ich auf der Website als Domain registriert habe.

Bruce · April 28, 2025, 8:26am

Habe jetzt weiter geforscht und statt „*.\DOMAIN.IPV64.DE“ (wie im Screenshot oben) folgendes eingegeben:

DOMAIN.IPV64.DE
und
*.DOMAIN.IPV64.DE

Jedoch erhalte ich dann einen neuen Fehler:

CommandError:   error: subprocess-exited-with-error
  
  × Building wheel for certbot-dns-multi (pyproject.toml) did not run successfully.
  │ exit code: 1
  ╰─> [41 lines of output]
      /tmp/pip-build-env-ckp_zutv/overlay/lib/python3.11/site-packages/setuptools/config/_apply_pyprojecttoml.py:82: SetuptoolsDeprecationWarning: `project.license` as a TOML table is deprecated
      !!
      
              ********************************************************************************
              Please use a simple string containing a SPDX expression for `project.license`. You can also use `project.license-files`. (Both options available on setuptools>=77.0.0).
      
              By 2026-Feb-18, you need to update your project and remove deprecated calls
              or your builds will no longer be supported.
      
              See https://packaging.python.org/en/latest/guides/writing-pyproject-toml/#license for details.
              ********************************************************************************
      
      !!
        corresp(dist, value, root_dir)
      running bdist_wheel
      running build
      running build_py
      creating build/lib.linux-aarch64-cpython-311/certbot_dns_multi
      copying certbot_dns_multi/_version.py -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi
      copying certbot_dns_multi/__init__.py -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi
      creating build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal
      copying certbot_dns_multi/_internal/dns_multi.py -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal
      running egg_info
      writing certbot_dns_multi.egg-info/PKG-INFO
      writing dependency_links to certbot_dns_multi.egg-info/dependency_links.txt
      writing entry points to certbot_dns_multi.egg-info/entry_points.txt
      writing requirements to certbot_dns_multi.egg-info/requires.txt
      writing top-level names to certbot_dns_multi.egg-info/top_level.txt
      ERROR setuptools_scm._file_finders.git listing git files failed - pretending there aren't any
      reading manifest file 'certbot_dns_multi.egg-info/SOURCES.txt'
      reading manifest template 'MANIFEST.in'
      adding license file 'LICENSE.txt'
      writing manifest file 'certbot_dns_multi.egg-info/SOURCES.txt'
      creating build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal/bridge
      copying certbot_dns_multi/_internal/bridge/go.mod -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal/bridge
      copying certbot_dns_multi/_internal/bridge/go.sum -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal/bridge
      copying certbot_dns_multi/_internal/bridge/main.c -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal/bridge
      copying certbot_dns_multi/_internal/bridge/main.go -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal/bridge
      running build_ext
      $ GOPATH=/tmp/tmpe3aznnto go get -d
      error: [Errno 2] No such file or directory: 'go'
      [end of output]
  
  note: This error originates from a subprocess, and is likely not a problem with pip.
  ERROR: Failed building wheel for certbot-dns-multi

[notice] A new release of pip is available: 25.0.1 -> 25.1
[notice] To update, run: pip install --upgrade pip
ERROR: Failed to build installable wheels for some pyproject.toml based projects (certbot-dns-multi)

    at /app/lib/utils.js:16:13
    at ChildProcess.exithandler (node:child_process:430:5)
    at ChildProcess.emit (node:events:518:28)
    at maybeClose (node:internal/child_process:1104:16)
    at ChildProcess._handle.onexit (node:internal/child_process:304:5)

jklein · April 28, 2025, 11:10am

Hallo,
der Screenshot war ein wenig schlecht abgeschnitten.
Du must bei DomainName: *.domain.ipv64.de eingeben.
Bei mir hat das direkt geklappt.

Bruce · April 28, 2025, 11:16am

Danke @jklein.

Ergänzung zu meinem Setup: Ich nutze das nginx-Dockerfile von
jc21/nginx-proxy-manager:latest

Bruce · April 30, 2025, 7:39pm

Hat niemand eine Idee?

LKS.NTZL · April 30, 2025, 8:17pm

Ansonsten mach zum erstellen des Zertifikats kurz die Ports 443 & 80 in deinem Router auf und wenn du das Zertifikat erstellt hast machst du die Ports wieder zu.

Bruce · May 4, 2025, 7:09pm

Die Ports habe ich freigegeben und es nochmal probiert:

CommandError:   error: subprocess-exited-with-error
  
  × Building wheel for certbot-dns-multi (pyproject.toml) did not run successfully.
  │ exit code: 1
  ╰─> [41 lines of output]
      /tmp/pip-build-env-v_4pdxav/overlay/lib/python3.11/site-packages/setuptools/config/_apply_pyprojecttoml.py:82: SetuptoolsDeprecationWarning: `project.license` as a TOML table is deprecated
      !!
      
              ********************************************************************************
              Please use a simple string containing a SPDX expression for `project.license`. You can also use `project.license-files`. (Both options available on setuptools>=77.0.0).
      
              By 2026-Feb-18, you need to update your project and remove deprecated calls
              or your builds will no longer be supported.
      
              See https://packaging.python.org/en/latest/guides/writing-pyproject-toml/#license for details.
              ********************************************************************************
      
      !!
        corresp(dist, value, root_dir)
      running bdist_wheel
      running build
      running build_py
      creating build/lib.linux-aarch64-cpython-311/certbot_dns_multi
      copying certbot_dns_multi/_version.py -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi
      copying certbot_dns_multi/__init__.py -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi
      creating build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal
      copying certbot_dns_multi/_internal/dns_multi.py -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal
      running egg_info
      writing certbot_dns_multi.egg-info/PKG-INFO
      writing dependency_links to certbot_dns_multi.egg-info/dependency_links.txt
      writing entry points to certbot_dns_multi.egg-info/entry_points.txt
      writing requirements to certbot_dns_multi.egg-info/requires.txt
      writing top-level names to certbot_dns_multi.egg-info/top_level.txt
      ERROR setuptools_scm._file_finders.git listing git files failed - pretending there aren't any
      reading manifest file 'certbot_dns_multi.egg-info/SOURCES.txt'
      reading manifest template 'MANIFEST.in'
      adding license file 'LICENSE.txt'
      writing manifest file 'certbot_dns_multi.egg-info/SOURCES.txt'
      creating build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal/bridge
      copying certbot_dns_multi/_internal/bridge/go.mod -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal/bridge
      copying certbot_dns_multi/_internal/bridge/go.sum -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal/bridge
      copying certbot_dns_multi/_internal/bridge/main.c -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal/bridge
      copying certbot_dns_multi/_internal/bridge/main.go -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal/bridge
      running build_ext
      $ GOPATH=/tmp/tmpnx8r4663 go get -d
      error: [Errno 2] No such file or directory: 'go'
      [end of output]
  
  note: This error originates from a subprocess, and is likely not a problem with pip.
  ERROR: Failed building wheel for certbot-dns-multi

[notice] A new release of pip is available: 25.0.1 -> 25.1.1
[notice] To update, run: pip install --upgrade pip
ERROR: Failed to build installable wheels for some pyproject.toml based projects (certbot-dns-multi)

    at /app/lib/utils.js:16:13
    at ChildProcess.exithandler (node:child_process:430:5)
    at ChildProcess.emit (node:events:518:28)
    at maybeClose (node:internal/child_process:1104:16)
    at ChildProcess._handle.onexit (node:internal/child_process:304:5)

Bruce · May 5, 2025, 11:08am

Kann das was mit dem DNS-Rebind Schutz der Fritz!Box zu tun haben?

Bruce · May 7, 2025, 1:30pm

Geht immer noch nicht, was kann ich machen?