Skip to content

[Bug] Cannot create proxy host; issue with OpenSSL / Certbot? #335

Open
@Momro

Description

@Momro

Current Behavior

Hi,

I'm launching the docker container with this pretty default yml:

version: '3.8'
services:
  nginx-proxy-manager:
    image: jlesage/nginx-proxy-manager
    ports:
      - '81:8181'   # HTTP Port
      - '80:8080'  # HTTPS Port
      - '44:4443'   # Admin Web Interface Port
    volumes:
      - /opt/nginx/data:/config/data
      - /opt/nginx/letsencrypt:/config/letsencrypt
    restart: unless-stopped

I log in to the admin web console with SSH port forwarding into my RPi:

ssh -L 8181:localhost:81 pi-docker

I add a proxy host, fill in all the details into the popup, then I receive a non-descriptive error "Internal Error".

Image

I go to the console of my Pi and see this error message:

nginx-proxy-manager_1  | [app         ] [2/15/2025] [6:48:00 PM] [SSL      ] › ℹ  info      Requesting Let'sEncrypt certificates for Cert #2: here.is.my.domain
nginx-proxy-manager_1  | [app         ] [2/15/2025] [6:48:00 PM] [SSL      ] › ℹ  info      Command: certbot certonly --config '/etc/letsencrypt.ini' --work-dir "/tmp/letsencrypt-lib" --logs-dir "/tmp/letsencrypt-log" --cert-name "npm-2" --agree-tos --authenticator webroot --email '[email protected]' --preferred-challenges "dns,http" --domains "here.is.my.domain"
nginx-proxy-manager_1  | [app         ] [2/15/2025] [6:48:00 PM] [Global   ] › ⬤  debug     CMD: certbot certonly --config '/etc/letsencrypt.ini' --work-dir "/tmp/letsencrypt-lib" --logs-dir "/tmp/letsencrypt-log" --cert-name "npm-2" --agree-tos --authenticator webroot --email '[email protected]' --preferred-challenges "dns,http" --domains "here.is.my.domain"
nginx-proxy-manager_1  | [app         ] [2/15/2025] [6:48:01 PM] [Nginx    ] › ⬤  debug     Deleting file: /data/nginx/temp/letsencrypt_2.conf
nginx-proxy-manager_1  | [app         ] [2/15/2025] [6:48:01 PM] [Global   ] › ⬤  debug     CMD: /usr/sbin/nginx -t
nginx-proxy-manager_1  | [app         ] [2/15/2025] [6:48:01 PM] [Nginx    ] › ℹ  info      Reloading Nginx
nginx-proxy-manager_1  | [app         ] [2/15/2025] [6:48:01 PM] [Global   ] › ⬤  debug     CMD: /usr/sbin/nginx -s reload
nginx-proxy-manager_1  | [app         ] [2/15/2025] [6:48:01 PM] [Express  ] › ⚠  warning   Traceback (most recent call last):
nginx-proxy-manager_1  | [app         ]   File "/usr/bin/certbot", line 5, in <module>
nginx-proxy-manager_1  | [app         ]     from certbot.main import main
nginx-proxy-manager_1  | [app         ]   File "/usr/lib/python3.10/site-packages/certbot/main.py", line 6, in <module>
nginx-proxy-manager_1  | [app         ]     from certbot._internal import main as internal_main
nginx-proxy-manager_1  | [app         ]   File "/usr/lib/python3.10/site-packages/certbot/_internal/main.py", line 20, in <module>
nginx-proxy-manager_1  | [app         ]     import josepy as jose
nginx-proxy-manager_1  | [app         ]   File "/usr/lib/python3.10/site-packages/josepy/__init__.py", line 41, in <module>
nginx-proxy-manager_1  | [app         ]     from josepy.json_util import (
nginx-proxy-manager_1  | [app         ]   File "/usr/lib/python3.10/site-packages/josepy/json_util.py", line 25, in <module>
nginx-proxy-manager_1  | [app         ]     from OpenSSL import crypto
nginx-proxy-manager_1  | [app         ]   File "/usr/lib/python3.10/site-packages/OpenSSL/__init__.py", line 8, in <module>
nginx-proxy-manager_1  | [app         ]     from OpenSSL import SSL, crypto
nginx-proxy-manager_1  | [app         ]   File "/usr/lib/python3.10/site-packages/OpenSSL/SSL.py", line 9, in <module>
nginx-proxy-manager_1  | [app         ]     from OpenSSL._util import (
nginx-proxy-manager_1  | [app         ]   File "/usr/lib/python3.10/site-packages/OpenSSL/_util.py", line 6, in <module>
nginx-proxy-manager_1  | [app         ]     from cryptography.hazmat.bindings.openssl.binding import Binding
nginx-proxy-manager_1  | [app         ]   File "/usr/lib/python3.10/site-packages/cryptography/hazmat/bindings/openssl/binding.py", line 167, in <module>
nginx-proxy-manager_1  | [app         ]     Binding.init_static_locks()
nginx-proxy-manager_1  | [app         ]   File "/usr/lib/python3.10/site-packages/cryptography/hazmat/bindings/openssl/binding.py", line 134, in init_static_locks
nginx-proxy-manager_1  | [app         ]     cls._ensure_ffi_initialized()
nginx-proxy-manager_1  | [app         ]   File "/usr/lib/python3.10/site-packages/cryptography/hazmat/bindings/openssl/binding.py", line 123, in _ensure_ffi_initialized
nginx-proxy-manager_1  | [app         ]     _legacy_provider_error(cls._legacy_provider_loaded)
nginx-proxy-manager_1  | [app         ]   File "/usr/lib/python3.10/site-packages/cryptography/hazmat/bindings/openssl/binding.py", line 43, in _legacy_provider_error
nginx-proxy-manager_1  | [app         ]     raise RuntimeError(
nginx-proxy-manager_1  | [app         ] RuntimeError: OpenSSL 3.0's legacy provider failed to load. This is a fatal error by default, but cryptography supports running without legacy algorithms by setting the environment variable CRYPTOGRAPHY_OPENSSL_NO_LEGACY. If you did not expect this error, you have likely made a mistake with your OpenSSL configuration

I found here (https://community.letsencrypt.org/t/certbot-failing-with-problem-with-openssl-configuration/228670/12) that this might be fixed by added an env variable, CRYPTOGRAPHY_OPENSSL_NO_LEGACY=1 , but I'm not sure if this is even possible in docker (this is my second container I'm starting)

Expected Behavior

Install lets encrypt certificate and launch the proxy host

Steps To Reproduce

Pull docker container, launch, login, try to setup a proxy host with let's encrypt certificate

Environment

  • OS: Linux z2m 6.6.74+rpt-rpi-v7 manifest no found #1 SMP Raspbian 1:6.6.74-1+rpt1 (2025-01-27) armv7l GNU/Linux
  • OS version: current RPi 3 OS
  • CPU: rpi 3
  • Docker version: Docker version 20.10.24+dfsg1, build 297e128
  • Device model: rpi3
  • Browser/OS: whatever is the current RPi distribution :-/

Container creation

$ docker-compose -f ~/docker/nginx-proxy-manager.yml up

version: '3.8'
services:
  nginx-proxy-manager:
    image: jlesage/nginx-proxy-manager
    ports:
      - '81:8181'   # HTTP Port
      - '80:8080'  # HTTPS Port
      - '44:4443'   # Admin Web Interface Port
    volumes:
      - /opt/nginx/data:/config/data
      - /opt/nginx/letsencrypt:/config/letsencrypt
    restart: unless-stopped

Container log

[...]
[cert_cleanup] ----------------------------------------------------------
[cert_cleanup] Let's Encrypt certificates cleanup - 2025/02/15 18:39:12
[cert_cleanup] ----------------------------------------------------------
[cert_cleanup] 0 file(s) kept.
[cert_cleanup] 0 file(s) deleted.
[app         ] [2/15/2025] [6:39:13 PM] [Global   ] › ℹ  info      Using Sqlite: /data/database.sqlite
[app         ] [2/15/2025] [6:39:13 PM] [Global   ] › ℹ  info      Creating a new JWT key pair...
[app         ] [2/15/2025] [6:42:18 PM] [Global   ] › ℹ  info      Wrote JWT key pair to config file: /data/keys.json
[app         ] [2/15/2025] [6:42:27 PM] [Migrate  ] › ℹ  info      Current database version: none
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [initial-schema] Migrating Up...
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [initial-schema] auth Table created
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [initial-schema] user Table created
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [initial-schema] user_permission Table created
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [initial-schema] proxy_host Table created
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [initial-schema] redirection_host Table created
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [initial-schema] dead_host Table created
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [initial-schema] stream Table created
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [initial-schema] access_list Table created
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [initial-schema] certificate Table created
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [initial-schema] access_list_auth Table created
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [initial-schema] audit_log Table created
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [websockets] Migrating Up...
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [websockets] proxy_host Table altered
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [forward_host] Migrating Up...
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [forward_host] proxy_host Table altered
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [http2_support] Migrating Up...
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [http2_support] proxy_host Table altered
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [http2_support] redirection_host Table altered
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [http2_support] dead_host Table altered
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [forward_scheme] Migrating Up...
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [forward_scheme] proxy_host Table altered
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [disabled] Migrating Up...
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [disabled] proxy_host Table altered
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [disabled] redirection_host Table altered
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [disabled] dead_host Table altered
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [disabled] stream Table altered
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [custom_locations] Migrating Up...
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [custom_locations] proxy_host Table altered
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [hsts] Migrating Up...
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [hsts] proxy_host Table altered
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [hsts] redirection_host Table altered
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [hsts] dead_host Table altered
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [settings] Migrating Up...
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [settings] setting Table created
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [access_list_client] Migrating Up...
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [access_list_client] access_list_client Table created
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [access_list_client] access_list Table altered
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [access_list_client_fix] Migrating Up...
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [access_list_client_fix] access_list Table altered
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [pass_auth] Migrating Up...
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [pass_auth] access_list Table altered
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [redirection_scheme] Migrating Up...
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [redirection_scheme] redirection_host Table altered
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [redirection_status_code] Migrating Up...
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [redirection_status_code] redirection_host Table altered
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [stream_domain] Migrating Up...
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [stream_domain] stream Table altered
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [stream_domain] Migrating Up...
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [stream_ssl] Migrating Up...
[app         ] [2/15/2025] [6:42:28 PM] [Migrate  ] › ℹ  info      [stream_ssl] stream Table altered
[app         ] [2/15/2025] [6:42:29 PM] [Setup    ] › ℹ  info      Creating a new user: [email protected] with password: changeme
[app         ] [2/15/2025] [6:42:33 PM] [Setup    ] › ℹ  info      Initial admin setup completed
[app         ] [2/15/2025] [6:42:33 PM] [Setup    ] › ℹ  info      Default settings added
[app         ] [2/15/2025] [6:42:33 PM] [Setup    ] › ℹ  info      Logrotate Timer initialized
[app         ] [2/15/2025] [6:42:33 PM] [Global   ] › ⬤  debug     CMD: logrotate -s /config/logrotate.status /etc/logrotate.d/nginx-proxy-manager
[app         ] [2/15/2025] [6:42:33 PM] [Setup    ] › ℹ  info      Logrotate completed.
[app         ] [2/15/2025] [6:42:34 PM] [IP Ranges] › ℹ  info      Fetching IP Ranges from online services...
[app         ] [2/15/2025] [6:42:34 PM] [IP Ranges] › ℹ  info      Fetching https://ip-ranges.amazonaws.com/ip-ranges.json
[app         ] [2/15/2025] [6:42:35 PM] [IP Ranges] › ℹ  info      Fetching https://www.cloudflare.com/ips-v4
[app         ] [2/15/2025] [6:42:35 PM] [IP Ranges] › ℹ  info      Fetching https://www.cloudflare.com/ips-v6
[app         ] [2/15/2025] [6:42:36 PM] [SSL      ] › ℹ  info      Let's Encrypt Renewal Timer initialized
[app         ] [2/15/2025] [6:42:36 PM] [SSL      ] › ℹ  info      Renewing SSL certs expiring within 30 days ...
[app         ] [2/15/2025] [6:42:36 PM] [IP Ranges] › ℹ  info      IP Ranges Renewal Timer initialized
[app         ] [2/15/2025] [6:42:36 PM] [Global   ] › ℹ  info      Backend PID 394 listening on port 3000 ...
[app         ] [2/15/2025] [6:42:36 PM] [SSL      ] › ℹ  info      Completed SSL cert renew process
[app         ] [2/15/2025] [6:46:19 PM] [Nginx    ] › ⬤  debug     Deleting file: /data/nginx/proxy_host/1.conf
[app         ] [2/15/2025] [6:46:19 PM] [Nginx    ] › ⬤  debug     Could not delete file: {
[app         ]   "errno": -2,
[app         ]   "syscall": "unlink",
[app         ]   "code": "ENOENT",
[app         ]   "path": "/data/nginx/proxy_host/1.conf"
[app         ] }
[app         ] [2/15/2025] [6:46:19 PM] [Nginx    ] › ⬤  debug     Deleting file: /data/nginx/proxy_host/1.conf.err
[app         ] [2/15/2025] [6:46:19 PM] [Nginx    ] › ⬤  debug     Could not delete file: {
[app         ]   "errno": -2,
[app         ]   "syscall": "unlink",
[app         ]   "code": "ENOENT",
[app         ]   "path": "/data/nginx/proxy_host/1.conf.err"
[app         ] }
[app         ] [2/15/2025] [6:46:19 PM] [Global   ] › ⬤  debug     CMD: /usr/sbin/nginx -t
[app         ] [2/15/2025] [6:46:19 PM] [Nginx    ] › ℹ  info      Reloading Nginx
[app         ] [2/15/2025] [6:46:19 PM] [Global   ] › ⬤  debug     CMD: /usr/sbin/nginx -s reload
[app         ] [2/15/2025] [6:46:24 PM] [SSL      ] › ℹ  info      Requesting Let'sEncrypt certificates for Cert #1: here.is.my.domain
[app         ] [2/15/2025] [6:46:24 PM] [SSL      ] › ℹ  info      Command: certbot certonly --config '/etc/letsencrypt.ini' --work-dir "/tmp/letsencrypt-lib" --logs-dir "/tmp/letsencrypt-log" --cert-name "npm-1" --agree-tos --authenticator webroot --email '[email protected]' --preferred-challenges "dns,http" --domains "here.is.my.domain"
[app         ] [2/15/2025] [6:46:24 PM] [Global   ] › ⬤  debug     CMD: certbot certonly --config '/etc/letsencrypt.ini' --work-dir "/tmp/letsencrypt-lib" --logs-dir "/tmp/letsencrypt-log" --cert-name "npm-1" --agree-tos --authenticator webroot --email '[email protected]' --preferred-challenges "dns,http" --domains "here.is.my.domain"
[app         ] [2/15/2025] [6:46:25 PM] [Nginx    ] › ⬤  debug     Deleting file: /data/nginx/temp/letsencrypt_1.conf
[app         ] [2/15/2025] [6:46:26 PM] [Global   ] › ⬤  debug     CMD: /usr/sbin/nginx -t
[app         ] [2/15/2025] [6:46:26 PM] [Nginx    ] › ℹ  info      Reloading Nginx
[app         ] [2/15/2025] [6:46:26 PM] [Global   ] › ⬤  debug     CMD: /usr/sbin/nginx -s reload
[app         ] [2/15/2025] [6:46:26 PM] [Express  ] › ⚠  warning   Traceback (most recent call last):
[app         ]   File "/usr/bin/certbot", line 5, in <module>
[app         ]     from certbot.main import main
[app         ]   File "/usr/lib/python3.10/site-packages/certbot/main.py", line 6, in <module>
[app         ]     from certbot._internal import main as internal_main
[app         ]   File "/usr/lib/python3.10/site-packages/certbot/_internal/main.py", line 20, in <module>
[app         ]     import josepy as jose
[app         ]   File "/usr/lib/python3.10/site-packages/josepy/__init__.py", line 41, in <module>
[app         ]     from josepy.json_util import (
[app         ]   File "/usr/lib/python3.10/site-packages/josepy/json_util.py", line 25, in <module>
[app         ]     from OpenSSL import crypto
[app         ]   File "/usr/lib/python3.10/site-packages/OpenSSL/__init__.py", line 8, in <module>
[app         ]     from OpenSSL import SSL, crypto
[app         ]   File "/usr/lib/python3.10/site-packages/OpenSSL/SSL.py", line 9, in <module>
[app         ]     from OpenSSL._util import (
[app         ]   File "/usr/lib/python3.10/site-packages/OpenSSL/_util.py", line 6, in <module>
[app         ]     from cryptography.hazmat.bindings.openssl.binding import Binding
[app         ]   File "/usr/lib/python3.10/site-packages/cryptography/hazmat/bindings/openssl/binding.py", line 167, in <module>
[app         ]     Binding.init_static_locks()
[app         ]   File "/usr/lib/python3.10/site-packages/cryptography/hazmat/bindings/openssl/binding.py", line 134, in init_static_locks
[app         ]     cls._ensure_ffi_initialized()
[app         ]   File "/usr/lib/python3.10/site-packages/cryptography/hazmat/bindings/openssl/binding.py", line 123, in _ensure_ffi_initialized
[app         ]     _legacy_provider_error(cls._legacy_provider_loaded)
[app         ]   File "/usr/lib/python3.10/site-packages/cryptography/hazmat/bindings/openssl/binding.py", line 43, in _legacy_provider_error
[app         ]     raise RuntimeError(
[app         ] RuntimeError: OpenSSL 3.0's legacy provider failed to load. This is a fatal error by default, but cryptography supports running without legacy algorithms by setting the environment variable CRYPTOGRAPHY_OPENSSL_NO_LEGACY. If you did not expect this error, you have likely made a mistake with your OpenSSL configuration.
[app         ] [2/15/2025] [6:47:55 PM] [Nginx    ] › ⬤  debug     Deleting file: /data/nginx/proxy_host/2.conf
[app         ] [2/15/2025] [6:47:55 PM] [Nginx    ] › ⬤  debug     Could not delete file: {
[app         ]   "errno": -2,
[app         ]   "syscall": "unlink",
[app         ]   "code": "ENOENT",
[app         ]   "path": "/data/nginx/proxy_host/2.conf"
[app         ] }
[app         ] [2/15/2025] [6:47:55 PM] [Nginx    ] › ⬤  debug     Deleting file: /data/nginx/proxy_host/2.conf.err
[app         ] [2/15/2025] [6:47:55 PM] [Nginx    ] › ⬤  debug     Could not delete file: {
[app         ]   "errno": -2,
[app         ]   "syscall": "unlink",
[app         ]   "code": "ENOENT",
[app         ]   "path": "/data/nginx/proxy_host/2.conf.err"
[app         ] }
[app         ] [2/15/2025] [6:47:55 PM] [Global   ] › ⬤  debug     CMD: /usr/sbin/nginx -t
[app         ] [2/15/2025] [6:47:55 PM] [Nginx    ] › ℹ  info      Reloading Nginx
[app         ] [2/15/2025] [6:47:55 PM] [Global   ] › ⬤  debug     CMD: /usr/sbin/nginx -s reload
[app         ] [2/15/2025] [6:48:00 PM] [SSL      ] › ℹ  info      Requesting Let'sEncrypt certificates for Cert #2: here.is.my.domain
[app         ] [2/15/2025] [6:48:00 PM] [SSL      ] › ℹ  info      Command: certbot certonly --config '/etc/letsencrypt.ini' --work-dir "/tmp/letsencrypt-lib" --logs-dir "/tmp/letsencrypt-log" --cert-name "npm-2" --agree-tos --authenticator webroot --email '[email protected]' --preferred-challenges "dns,http" --domains "here.is.my.domain"
[app         ] [2/15/2025] [6:48:00 PM] [Global   ] › ⬤  debug     CMD: certbot certonly --config '/etc/letsencrypt.ini' --work-dir "/tmp/letsencrypt-lib" --logs-dir "/tmp/letsencrypt-log" --cert-name "npm-2" --agree-tos --authenticator webroot --email '[email protected]' --preferred-challenges "dns,http" --domains "here.is.my.domain"
[app         ] [2/15/2025] [6:48:01 PM] [Nginx    ] › ⬤  debug     Deleting file: /data/nginx/temp/letsencrypt_2.conf
[app         ] [2/15/2025] [6:48:01 PM] [Global   ] › ⬤  debug     CMD: /usr/sbin/nginx -t
[app         ] [2/15/2025] [6:48:01 PM] [Nginx    ] › ℹ  info      Reloading Nginx
[app         ] [2/15/2025] [6:48:01 PM] [Global   ] › ⬤  debug     CMD: /usr/sbin/nginx -s reload
[app         ] [2/15/2025] [6:48:01 PM] [Express  ] › ⚠  warning   Traceback (most recent call last):
[app         ]   File "/usr/bin/certbot", line 5, in <module>
[app         ]     from certbot.main import main
[app         ]   File "/usr/lib/python3.10/site-packages/certbot/main.py", line 6, in <module>
[app         ]     from certbot._internal import main as internal_main
[app         ]   File "/usr/lib/python3.10/site-packages/certbot/_internal/main.py", line 20, in <module>
[app         ]     import josepy as jose
[app         ]   File "/usr/lib/python3.10/site-packages/josepy/__init__.py", line 41, in <module>
[app         ]     from josepy.json_util import (
[app         ]   File "/usr/lib/python3.10/site-packages/josepy/json_util.py", line 25, in <module>
[app         ]     from OpenSSL import crypto
[app         ]   File "/usr/lib/python3.10/site-packages/OpenSSL/__init__.py", line 8, in <module>
[app         ]     from OpenSSL import SSL, crypto
[app         ]   File "/usr/lib/python3.10/site-packages/OpenSSL/SSL.py", line 9, in <module>
[app         ]     from OpenSSL._util import (
[app         ]   File "/usr/lib/python3.10/site-packages/OpenSSL/_util.py", line 6, in <module>
[app         ]     from cryptography.hazmat.bindings.openssl.binding import Binding
[app         ]   File "/usr/lib/python3.10/site-packages/cryptography/hazmat/bindings/openssl/binding.py", line 167, in <module>
[app         ]     Binding.init_static_locks()
[app         ]   File "/usr/lib/python3.10/site-packages/cryptography/hazmat/bindings/openssl/binding.py", line 134, in init_static_locks
[app         ]     cls._ensure_ffi_initialized()
[app         ]   File "/usr/lib/python3.10/site-packages/cryptography/hazmat/bindings/openssl/binding.py", line 123, in _ensure_ffi_initialized
[app         ]     _legacy_provider_error(cls._legacy_provider_loaded)
[app         ]   File "/usr/lib/python3.10/site-packages/cryptography/hazmat/bindings/openssl/binding.py", line 43, in _legacy_provider_error
[app         ]     raise RuntimeError(
[app         ] RuntimeError: OpenSSL 3.0's legacy provider failed to load. This is a fatal error by default, but cryptography supports running without legacy algorithms by setting the environment variable CRYPTOGRAPHY_OPENSSL_NO_LEGACY. If you did not expect this error, you have likely made a mistake with your OpenSSL configuration.
[supervisor  ] SIGTERM received, shutting down...
[supervisor  ] stopping service 'app'...
[app         ] [2/15/2025] [7:00:10 PM] [Global   ] › ℹ  info      PID 394 received SIGTERM
[app         ] [2/15/2025] [7:00:10 PM] [Global   ] › ℹ  info      Stopping.
[supervisor  ] service 'app' exited (with status 0).
[supervisor  ] stopping service 'nginx'...
[supervisor  ] service 'nginx' exited (with status 0).
[finish      ] executing container finish scripts...
[finish      ] all container finish scripts executed.

Container inspect


Anything else?

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions