Wie SSL-Zertifikate von ipv64.net in Nginx eintragen?

Hallo,

ich betreibe in meinem Homelab über docker einen Nginx proxy Manager und konnte bereits erfolgreich „http“ Einträge erstellen.
Über ipv64.net habe ich mir jetzt eine Domain registriert und weil jetzt nicht was ich machen soll damit ich „https“ Einträge bei mir anlegen kann.

Kann mir bitte jemand helfen?
Danke

Woran scheitert es denn genau?
Eigentlich musst du nichts weiter tun als dem NPM sagen dass er mit Letsencrypt ein Zertifikat erstellen soll, sofern Letsencrypt genutzt werden soll.

Edit: gibts auch nen Video von Dennis dazu

1 „Gefällt mir“

Die zertifikatserstellung durch let’s encrypt schlägt fehl.
Vermutlich, weil ich die Portfreigaben meines Routers nicht geöffnet habe.

Eigentlich möchte ich nur https Domains in meinem Heimnetzwerk ohne etwas nach außen freizugeben. In iOS 18 erhalten http Webseiten nämlich keine Passwortvorausfüllungen mehr.

Hallo,
mach es mit der DNS Challange dann must du keine Port aufmachen. Und es geht für alle Subdomains

1 „Gefällt mir“

Danke für den Screenshot.

Ich bekomme jedoch folgenden Fehler:

Habe als Domain Name folgendes angegeben: *.\DOMAIN.IPV64.DE

Ich gebe als DOMAIN.IPV64.DE schon das an, was ich auf der Website als Domain registriert habe.

Habe jetzt weiter geforscht und statt „*.\DOMAIN.IPV64.DE“ (wie im Screenshot oben) folgendes eingegeben:

DOMAIN.IPV64.DE
und
*.DOMAIN.IPV64.DE

Jedoch erhalte ich dann einen neuen Fehler:

CommandError:   error: subprocess-exited-with-error
  
  × Building wheel for certbot-dns-multi (pyproject.toml) did not run successfully.
  │ exit code: 1
  ╰─> [41 lines of output]
      /tmp/pip-build-env-ckp_zutv/overlay/lib/python3.11/site-packages/setuptools/config/_apply_pyprojecttoml.py:82: SetuptoolsDeprecationWarning: `project.license` as a TOML table is deprecated
      !!
      
              ********************************************************************************
              Please use a simple string containing a SPDX expression for `project.license`. You can also use `project.license-files`. (Both options available on setuptools>=77.0.0).
      
              By 2026-Feb-18, you need to update your project and remove deprecated calls
              or your builds will no longer be supported.
      
              See https://packaging.python.org/en/latest/guides/writing-pyproject-toml/#license for details.
              ********************************************************************************
      
      !!
        corresp(dist, value, root_dir)
      running bdist_wheel
      running build
      running build_py
      creating build/lib.linux-aarch64-cpython-311/certbot_dns_multi
      copying certbot_dns_multi/_version.py -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi
      copying certbot_dns_multi/__init__.py -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi
      creating build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal
      copying certbot_dns_multi/_internal/dns_multi.py -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal
      running egg_info
      writing certbot_dns_multi.egg-info/PKG-INFO
      writing dependency_links to certbot_dns_multi.egg-info/dependency_links.txt
      writing entry points to certbot_dns_multi.egg-info/entry_points.txt
      writing requirements to certbot_dns_multi.egg-info/requires.txt
      writing top-level names to certbot_dns_multi.egg-info/top_level.txt
      ERROR setuptools_scm._file_finders.git listing git files failed - pretending there aren't any
      reading manifest file 'certbot_dns_multi.egg-info/SOURCES.txt'
      reading manifest template 'MANIFEST.in'
      adding license file 'LICENSE.txt'
      writing manifest file 'certbot_dns_multi.egg-info/SOURCES.txt'
      creating build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal/bridge
      copying certbot_dns_multi/_internal/bridge/go.mod -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal/bridge
      copying certbot_dns_multi/_internal/bridge/go.sum -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal/bridge
      copying certbot_dns_multi/_internal/bridge/main.c -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal/bridge
      copying certbot_dns_multi/_internal/bridge/main.go -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal/bridge
      running build_ext
      $ GOPATH=/tmp/tmpe3aznnto go get -d
      error: [Errno 2] No such file or directory: 'go'
      [end of output]
  
  note: This error originates from a subprocess, and is likely not a problem with pip.
  ERROR: Failed building wheel for certbot-dns-multi

[notice] A new release of pip is available: 25.0.1 -> 25.1
[notice] To update, run: pip install --upgrade pip
ERROR: Failed to build installable wheels for some pyproject.toml based projects (certbot-dns-multi)

    at /app/lib/utils.js:16:13
    at ChildProcess.exithandler (node:child_process:430:5)
    at ChildProcess.emit (node:events:518:28)
    at maybeClose (node:internal/child_process:1104:16)
    at ChildProcess._handle.onexit (node:internal/child_process:304:5)

Hallo,
der Screenshot war ein wenig schlecht abgeschnitten.
Du must bei DomainName: *.domain.ipv64.de eingeben.
Bei mir hat das direkt geklappt.

Danke @jklein.

Ergänzung zu meinem Setup: Ich nutze das nginx-Dockerfile von
jc21/nginx-proxy-manager:latest

Hat niemand eine Idee?

Ansonsten mach zum erstellen des Zertifikats kurz die Ports 443 & 80 in deinem Router auf und wenn du das Zertifikat erstellt hast machst du die Ports wieder zu.

Die Ports habe ich freigegeben und es nochmal probiert:

CommandError:   error: subprocess-exited-with-error
  
  × Building wheel for certbot-dns-multi (pyproject.toml) did not run successfully.
  │ exit code: 1
  ╰─> [41 lines of output]
      /tmp/pip-build-env-v_4pdxav/overlay/lib/python3.11/site-packages/setuptools/config/_apply_pyprojecttoml.py:82: SetuptoolsDeprecationWarning: `project.license` as a TOML table is deprecated
      !!
      
              ********************************************************************************
              Please use a simple string containing a SPDX expression for `project.license`. You can also use `project.license-files`. (Both options available on setuptools>=77.0.0).
      
              By 2026-Feb-18, you need to update your project and remove deprecated calls
              or your builds will no longer be supported.
      
              See https://packaging.python.org/en/latest/guides/writing-pyproject-toml/#license for details.
              ********************************************************************************
      
      !!
        corresp(dist, value, root_dir)
      running bdist_wheel
      running build
      running build_py
      creating build/lib.linux-aarch64-cpython-311/certbot_dns_multi
      copying certbot_dns_multi/_version.py -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi
      copying certbot_dns_multi/__init__.py -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi
      creating build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal
      copying certbot_dns_multi/_internal/dns_multi.py -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal
      running egg_info
      writing certbot_dns_multi.egg-info/PKG-INFO
      writing dependency_links to certbot_dns_multi.egg-info/dependency_links.txt
      writing entry points to certbot_dns_multi.egg-info/entry_points.txt
      writing requirements to certbot_dns_multi.egg-info/requires.txt
      writing top-level names to certbot_dns_multi.egg-info/top_level.txt
      ERROR setuptools_scm._file_finders.git listing git files failed - pretending there aren't any
      reading manifest file 'certbot_dns_multi.egg-info/SOURCES.txt'
      reading manifest template 'MANIFEST.in'
      adding license file 'LICENSE.txt'
      writing manifest file 'certbot_dns_multi.egg-info/SOURCES.txt'
      creating build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal/bridge
      copying certbot_dns_multi/_internal/bridge/go.mod -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal/bridge
      copying certbot_dns_multi/_internal/bridge/go.sum -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal/bridge
      copying certbot_dns_multi/_internal/bridge/main.c -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal/bridge
      copying certbot_dns_multi/_internal/bridge/main.go -> build/lib.linux-aarch64-cpython-311/certbot_dns_multi/_internal/bridge
      running build_ext
      $ GOPATH=/tmp/tmpnx8r4663 go get -d
      error: [Errno 2] No such file or directory: 'go'
      [end of output]
  
  note: This error originates from a subprocess, and is likely not a problem with pip.
  ERROR: Failed building wheel for certbot-dns-multi

[notice] A new release of pip is available: 25.0.1 -> 25.1.1
[notice] To update, run: pip install --upgrade pip
ERROR: Failed to build installable wheels for some pyproject.toml based projects (certbot-dns-multi)

    at /app/lib/utils.js:16:13
    at ChildProcess.exithandler (node:child_process:430:5)
    at ChildProcess.emit (node:events:518:28)
    at maybeClose (node:internal/child_process:1104:16)
    at ChildProcess._handle.onexit (node:internal/child_process:304:5)

Kann das was mit dem DNS-Rebind Schutz der Fritz!Box zu tun haben?

Geht immer noch nicht, was kann ich machen?

Danke für den Input bei mir hat es auch genau so Funktioniert :slight_smile:

Wenn du LetsEncypt im NPM nutzen willst, MUSS auch der Port 80 offen sein zum NPM. Und die Domain sollte auch natürlich auch entsprechend auf den NPM zeigen. Vielleicht in der Fritzbox nicht die Portweiterleitungen eingerichtet (80 & 443)?

Nach langer Zeit habe ich das mal wieder versucht:

Port 80 und 443 sind auf dem Docker-Server freigegeben.

Add Let’s Encrypt via DNS, dann *.domain.ipv64.de

Dann DNS multi, dann
dns_multi_provider=ipv64
IPV64_API_KEY=MEIN_API_KEY

und dann wieder Fehler.
Ich habe noch immer keine Ahnung woran es liegt…

Hier der Docker-Log:

× Building wheel for certbot-dns-multi (pyproject.toml) did not run successfully.

│ exit code: 1

╰─> [53 lines of output]

  /tmp/pip-build-env-6w9yxmjk/overlay/lib/python3.11/site-packages/\_distutils_hack/\__init_\_.py:53: UserWarning: Reliance on distutils from stdlib is deprecated. Users must rely on setuptools to provide the distutils module. Avoid importing distutils or import setuptools first, and avoid setting SETUPTOOLS_USE_DISTUTILS=stdlib. Register concerns at https://github.com/pypa/setuptools/issues/new?template=distutils-deprecation.yml

    warnings.warn(

  /tmp/pip-build-env-6w9yxmjk/overlay/lib/python3.11/site-packages/setuptools_scm/\_integration/deprecation.py:7: UserWarning: pyproject.toml: at \[tool.setuptools.dynamic\]

  version = {attr = ...} is forcing setuptools to override the version setuptools-scm did already set

  When using setuptools-scm it's invalid to use setuptools dynamic version as well, please remove it.

  Setuptools-scm is responsible for setting the version, forcing setuptools to override creates errors.

    warnings.warn(

  /tmp/pip-build-env-6w9yxmjk/overlay/lib/python3.11/site-packages/setuptools/config/\_apply_pyprojecttoml.py:82: SetuptoolsDeprecationWarning: \`project.license\` as a TOML table is deprecated

  !!

  

          \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*

          Please use a simple string containing a SPDX expression for \`project.license\`. You can also use \`project.license-files\`. (Both options available on setuptools>=77.0.0).

  

          By 2026-Feb-18, you need to update your project and remove deprecated calls

          or your builds will no longer be supported.

  

          See https://packaging.python.org/en/latest/guides/writing-pyproject-toml/#license for details.

          \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*

  

  !!

    corresp(dist, value, root_dir)

  pip_system_certs: ERROR: truststore not available

  running bdist_wheel

  running build

  running build_py

  creating build

  creating build/lib.linux-aarch64-3.11

  creating build/lib.linux-aarch64-3.11/certbot_dns_multi

  copying certbot_dns_multi/\_version.py -> build/lib.linux-aarch64-3.11/certbot_dns_multi

  copying certbot_dns_multi/\__init_\_.py -> build/lib.linux-aarch64-3.11/certbot_dns_multi

  package init file 'certbot_dns_multi/\_internal/\__init_\_.py' not found (or not a regular file)

  creating build/lib.linux-aarch64-3.11/certbot_dns_multi/\_internal

  copying certbot_dns_multi/\_internal/dns_multi.py -> build/lib.linux-aarch64-3.11/certbot_dns_multi/\_internal

  package init file 'certbot_dns_multi/\_internal/bridge/\__init_\_.py' not found (or not a regular file)

  running egg_info

  writing certbot_dns_multi.egg-info/PKG-INFO

  writing dependency_links to certbot_dns_multi.egg-info/dependency_links.txt

  writing entry points to certbot_dns_multi.egg-info/entry_points.txt

  writing requirements to certbot_dns_multi.egg-info/requires.txt

  writing top-level names to certbot_dns_multi.egg-info/top_level.txt

  listing git files failed - pretending there aren't any

  reading manifest file 'certbot_dns_multi.egg-info/SOURCES.txt'

  reading manifest template 'MANIFEST.in'

  adding license file 'LICENSE.txt'

  writing manifest file 'certbot_dns_multi.egg-info/SOURCES.txt'

  creating build/lib.linux-aarch64-3.11/certbot_dns_multi/\_internal/bridge

  copying certbot_dns_multi/\_internal/bridge/go.mod -> build/lib.linux-aarch64-3.11/certbot_dns_multi/\_internal/bridge

  copying certbot_dns_multi/\_internal/bridge/go.sum -> build/lib.linux-aarch64-3.11/certbot_dns_multi/\_internal/bridge

  copying certbot_dns_multi/\_internal/bridge/main.c -> build/lib.linux-aarch64-3.11/certbot_dns_multi/\_internal/bridge

  copying certbot_dns_multi/\_internal/bridge/main.go -> build/lib.linux-aarch64-3.11/certbot_dns_multi/\_internal/bridge

  running build_ext

  $ GOPATH=/tmp/tmpfz6u_xhh go get -d

  error: \[Errno 2\] No such file or directory: 'go'

  \[end of output\]

note: This error originates from a subprocess, and is likely not a problem with pip.

ERROR: Failed building wheel for certbot-dns-multi

error: failed-wheel-build-for-install

× Failed to build installable wheels for some pyproject.toml based projects

╰─> certbot-dns-multi

Kann mir bitte jemand helfen?

Pi-hole deaktivieren hat auch nicht geholfen.

Ich bin ratlos.

Muss ich die IPV64-Domain in meiner Fritz!Box als DynDNS eintragen???