Skip to content

EASYHAPROXY_CERTBOT_AUTOCONFIG=zerossl is giving me NOSRV errors #60

Closed
Closed
EASYHAPROXY_CERTBOT_AUTOCONFIG=zerossl is giving me NOSRV errors#60
@shoutmarble

Description

@shoutmarble
shoutmarble
opened on Aug 24, 2025

I'm getting a NOSRV when trying to get my ACME TLS certs

haproxy | HAPROXY [2025-08-24 00:37:11,322] INFO - 157.119.40.23:45184 [24/Aug/2025:00:37:11.321] http_in_443 http_in_443/<NOSRV> -1/-1/-1/-1/0 400 0 - - PR-- 1/1/0/0/0 0/0 "<BADREQ>"

My certs_acme folder doesn't get TLS certs written to it

(I have a certs_lego certs from another independent process)

I'm not dependent on using EASYHAPROXY_CERTBOT_AUTOCONFIG=zerossl any method to get TLS working would be fine.

If I could use the DNS-01 subdomain wildcard LEGO certs that would be good.

network.sh 
docker network create easyhaproxy
compose.yml 
networks:
    easyhaproxy:
        external: true
        name: easyhaproxy

services:
  haproxy:
    image: byjg/easy-haproxy:4.5.0
    container_name: haproxy
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - ./certs_acme:/certs/certbot
    networks:
      - easyhaproxy
    environment:
      - EASYHAPROXY_DISCOVER=docker
      - EASYHAPROXY_CERTBOT_AUTOCONFIG=zerossl
      - EASYHAPROXY_CERTBOT_EMAIL=-----------------@gmail.com
      - EASYHAPROXY_LABEL_PREFIX=haproxy
      - EASYHAPROXY_SSL_MODE=default
      - EASYHAPROXY_LOG_LEVEL=trace
      - CERTBOT_LOG_LEVEL=trace
      - HAPROXY_LOG_LEVEL=trace
      - HAPROXY_USERNAME=admin
      - HAPROXY_PASSWORD=admin
      - HAPROXY_STATS_PORT=1936
    ports:
      - "80:80/tcp"
      - "443:443/tcp"
      - "1936:1936/tcp"
      - "8080:8080/tcp"
whoami.yml 
networks:
    easyhaproxy:
        external: true
        name: easyhaproxy

services:
    whoami:
        image: traefik/whoami
        container_name: whoami
        networks:
            - easyhaproxy
        labels:
            - haproxy.https.port=443
            - haproxy.https.localport=80
            - haproxy.https.host=who.landingdev.xyz
            - haproxy.https.ssl_certbot=true
logs 
root@srv456397:~/900_haproxy/haproxy# docker compose up | head -c 15000
[+] Running 9/9
 ✔ haproxy Pulled           5.9s 6.43MB Pulling 5.9s
[+] Running 1/1
 ✔ Container haproxy  Created0.4s
Attaching to haproxy
haproxy  | INIT [2025-08-24 01:02:09,800] INFO - HAProxy version 2.8.14-c23fe91 2025/01/29 - https://haproxy.org/
haproxy  | INIT [2025-08-24 01:02:09,800] INFO - ['Status: long-term supported branch - will stop receiving fixes around Q2 2028.', 'Known bugs: http://www.haproxy.org/bugs/bugs-2.8.14.html', 'Running on: Linux 6.14.0-28-generic #28-Ubuntu SMP PREEMPT_DYNAMIC Wed Jul 23 12:05:14 UTC 2025 x86_64']
haproxy  | INIT [2025-08-24 01:02:09,800] INFO -                       _
haproxy  | INIT [2025-08-24 01:02:09,801] INFO -  ___ __ _ ____  _ ___| |_  __ _ _ __ _ _ _____ ___  _
haproxy  | INIT [2025-08-24 01:02:09,801] INFO - / -_) _` (_-< || |___| ' \/ _` | '_ \ '_/ _ \ \ / || |
haproxy  | INIT [2025-08-24 01:02:09,801] INFO - \___\__,_/__/\_, |   |_||_\__,_| .__/_| \___/_\_\_, |
haproxy  | INIT [2025-08-24 01:02:09,801] INFO -              |__/              |_|               |__/
haproxy  | INIT [2025-08-24 01:02:09,801] INFO - Release: "4.5.0"
haproxy  | EASYHAPROXY [2025-08-24 01:02:10,918] INFO - Found hosts:
haproxy  | EASYHAPROXY [2025-08-24 01:02:10,918] DEBUG - Object Found: {'172.18.0.2': {'com.docker.compose.config-hash': '372fa830be108249088fed814e520d5a702b07b2502241cd092fc3b7b0e55174', 'com.docker.compose.container-number': '1', 'com.docker.compose.depends_on': '', 'com.docker.compose.image': 'sha256:c59c43091bb1af101f356808e256ccae8bdec29387ee55ad0f8503716766d1da', 'com.docker.compose.oneoff': 'False', 'com.docker.compose.project': 'haproxy', 'com.docker.compose.project.config_files': '/root/900_haproxy/haproxy/compose.yml', 'com.docker.compose.project.working_dir': '/root/900_haproxy/haproxy', 'com.docker.compose.service': 'haproxy', 'com.docker.compose.version': '2.39.1', 'org.opencontainers.image.created': '2025-04-16T18:50:50.972Z', 'org.opencontainers.image.description': 'Discover services and create dynamically the haproxy.cfg based on the labels defined in docker containers or from a simple static Yaml', 'org.opencontainers.image.licenses': 'MIT', 'org.opencontainers.image.revision': '54b04ba3a5b8a9735003f6c78de5ba3acf776e5b', 'org.opencontainers.image.source': 'https://github.com/byjg/docker-easy-haproxy', 'org.opencontainers.image.title': 'docker-easy-haproxy', 'org.opencontainers.image.url': 'https://github.com/byjg/docker-easy-haproxy', 'org.opencontainers.image.version': '4.5.0'}}
haproxy  | EASYHAPROXY [2025-08-24 01:02:20,936] INFO - Heartbeat
haproxy  | EASYHAPROXY [2025-08-24 01:02:30,946] INFO - Heartbeat
haproxy  | EASYHAPROXY [2025-08-24 01:02:40,955] INFO - Heartbeat
haproxy  | EASYHAPROXY [2025-08-24 01:02:50,966] INFO - New configuration found. Reloading...
haproxy  | EASYHAPROXY [2025-08-24 01:02:50,966] DEBUG - Object Found: {'172.18.0.3': {'com.docker.compose.config-hash': '574efb58503c6136e3224fc62ac7bf1f7cb39b882950178a54b8c46b684ed576', 'com.docker.compose.container-number': '1', 'com.docker.compose.depends_on': '', 'com.docker.compose.image': 'sha256:6fee7566e4273ee6078f08e167e36434b35f72152232a5e6f1446288817dabe5', 'com.docker.compose.oneoff': 'False', 'com.docker.compose.project': 'haproxy', 'com.docker.compose.project.config_files': '/root/900_haproxy/haproxy/whoami.yml', 'com.docker.compose.project.working_dir': '/root/900_haproxy/haproxy', 'com.docker.compose.service': 'whoami', 'com.docker.compose.version': '2.39.1', 'haproxy.https.host': 'who.landingdev.xyz', 'haproxy.https.localport': '80', 'haproxy.https.port': '443', 'haproxy.https.ssl_certbot': 'true', 'org.opencontainers.image.created': '2025-03-13T14:25:39Z', 'org.opencontainers.image.description': 'Tiny Go webserver that prints OS information and HTTP request to output', 'org.opencontainers.image.documentation': 'https://github.com/traefik/whoami', 'org.opencontainers.image.revision': '7e57190724ca7c0a74aa7f878b6cefe13b11994f', 'org.opencontainers.image.source': 'https://github.com/traefik/whoami', 'org.opencontainers.image.title': 'whoami', 'org.opencontainers.image.url': 'https://github.com/traefik/whoami', 'org.opencontainers.image.version': '1.11.0'}, '172.18.0.2': {'com.docker.compose.config-hash': '372fa830be108249088fed814e520d5a702b07b2502241cd092fc3b7b0e55174', 'com.docker.compose.container-number': '1', 'com.docker.compose.depends_on': '', 'com.docker.compose.image': 'sha256:c59c43091bb1af101f356808e256ccae8bdec29387ee55ad0f8503716766d1da', 'com.docker.compose.oneoff': 'False', 'com.docker.compose.project': 'haproxy', 'com.docker.compose.project.config_files': '/root/900_haproxy/haproxy/compose.yml', 'com.docker.compose.project.working_dir': '/root/900_haproxy/haproxy', 'com.docker.compose.service': 'haproxy', 'com.docker.compose.version': '2.39.1', 'org.opencontainers.image.created': '2025-04-16T18:50:50.972Z', 'org.opencontainers.image.description': 'Discover services and create dynamically the haproxy.cfg based on the labels defined in docker containers or from a simple static Yaml', 'org.opencontainers.image.licenses': 'MIT', 'org.opencontainers.image.revision': '54b04ba3a5b8a9735003f6c78de5ba3acf776e5b', 'org.opencontainers.image.source': 'https://github.com/byjg/docker-easy-haproxy', 'org.opencontainers.image.title': 'docker-easy-haproxy', 'org.opencontainers.image.url': 'https://github.com/byjg/docker-easy-haproxy', 'org.opencontainers.image.version': '4.5.0'}}
haproxy  | EASYHAPROXY [2025-08-24 01:02:51,009] INFO - Found hosts: who.landingdev.xyz:443
haproxy  | EASYHAPROXY [2025-08-24 01:02:51,017] INFO - Heartbeat
haproxy  | EASYHAPROXY [2025-08-24 01:03:01,033] INFO - Heartbeat
haproxy  | EASYHAPROXY [2025-08-24 01:03:11,044] INFO - Heartbeat
haproxy  | EASYHAPROXY [2025-08-24 01:03:21,053] INFO - Heartbeat
haproxy  | EASYHAPROXY [2025-08-24 01:03:31,063] INFO - Heartbeat
haproxy  | EASYHAPROXY [2025-08-24 01:03:41,074] INFO - Heartbeat
haproxy  | EASYHAPROXY [2025-08-24 01:03:51,084] INFO - Heartbeat
haproxy  | EASYHAPROXY [2025-08-24 01:04:01,096] INFO - Heartbeat
haproxy  | EASYHAPROXY [2025-08-24 01:04:11,107] INFO - Heartbeat
haproxy  | HAPROXY [2025-08-24 01:04:14,910] INFO - 47.26.234.89:64796 [24/Aug/2025:01:04:14.909] http_in_443 http_in_443/<NOSRV> -1/-1/-1/-1/0 400 0 - - PR-- 1/1/0/0/0 0/0 "<BADREQ>"
haproxy  |
haproxy  | EASYHAPROXY [2025-08-24 01:04:21,119] INFO - Heartbeat
files 
root@srv456397:~/900_haproxy/haproxy# tree
.
├── ZEROSSL.QUERY.CURL
├── certs_acme
├── certs_lego
│   ├── accounts
│   │   └── acme-v02.api.letsencrypt.org
│   │       └── -------------@gmail.com
│   │           ├── account.json
│   │           └── keys
│   │               └── -------------@gmail.com.key
│   └── certificates
│       ├── -------------.crt
│       ├── -------------.issuer.crt
│       ├── -------------.json
│       ├── -------------.key
│       └── -------------.pem
├── compose.yml
├── down.sh
├── network.sh
├── ps.sh
├── rm-all.sh
├── up.sh
└── whoami.yml

8 directories, 15 files

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions