SMS desktop app

[privsec]

Hooray! After blindly throwing things at the wall, the command sudo apt-get install python3-certbot-nginx moved me along.

Now my domain name is redirecting me to a bad gteway page. Progress.

[privsec]

Ok, so, another problem

Within the LXC container, I cant resolve to any external providers.

And not surprisingly, installing everything outside the container does nothing.

But to be clear, within the container, nothing works or install able, outside of the LXC container, it all works.

[privsec]

Ok, I have determined that it was my UFW firewall rules

[timconsidine]

@privsec sorry I missed this.
all working now ?

[privsec]

@timconsidine

No worries!

Sadly, no.

I finally have
in my terminal via the LXC, but in my browser, all I am getting is

[privsec]

@timconsidine

These are my logs

2021/11/03 13:17:06 [error] 47695#47695: *14 connect() failed (111: Connection refused) while connecting to upstream, client: xx.xx.xx.xx, server: app.domain.com, request: "GET / HTTP/1.1", up>
2021/11/03 13:17:06 [error] 47695#47695: *14 connect() failed (111: Connection refused) while connecting to upstream, client: xx.xx.xx.xx,, server: app.domain.com, request: "GET /favicon.ico HT>
2021/11/03 13:17:27 [error] 47695#47695: *19 connect() failed (111: Connection refused) while connecting to upstream, client: xx.xx.xx.xx,, server: app.domain.com, request: "GET / HTTP/1.1", u>
2021/11/03 13:17:27 [error] 47695#47695: *23 connect() failed (111: Connection refused) while connecting to upstream, client: xx.xx.xx.xx,, server: app.domain.com, request: "GET / HTTP/1.1", u>
2021/11/03 13:17:27 [error] 47695#47695: *24 connect() failed (111: Connection refused) while connecting to upstream, client: xx.xx.xx.xx,, server: app.domain.com, request: "GET / HTTP/1.1", u>
2021/11/03 13:17:59 [error] 47695#47695: *27 connect() failed (111: Connection refused) while connecting to upstream, client: xx.xx.xx.xx,, server: app.domain.com, request: "GET / HTTP/1.1", u>
2021/11/03 13:19:08 [error] 47695#47695: *29 connect() failed (111: Connection refused) while connecting to upstream, client: xx.xx.xx.xx,, server: app.domain.com, request: "GET / HTTP/1.1", u>
2021/11/03 13:22:47 [warn] 48507#48507: conflicting server name "app.domain.com" on 0.0.0.0:80, ignored
2021/11/03 13:22:47 [warn] 48507#48507: conflicting server name "app.domain.com" on [::]:80, ignored
2021/11/03 13:23:14 [warn] 48554#48554: conflicting server name "app.domain.com" on 0.0.0.0:80, ignored
2021/11/03 13:23:14 [warn] 48554#48554: conflicting server name "app.domain.com" on [::]:80, ignored

[privsec]

@privsec
I have confirmed that the all three nginx files use the LXC IP address, not the VPS IP address.

[timconsidine]

@privsec it does take a moment or two before starting up
but if this persists, seems like it is not finding the app

at the risk of basics for troubleshooting:

• inside the container and inside the installation directory, you have done node app.js & to start it (I have forgotten a couple of times). I think you have because you got database connected but maybe the program stopped for some other change

• outside the container, you have run systemctl reload nginx without errors ? and/or run nginx -t without errors ?

• these errors suggest continuing nginx conf issue

2021/11/03 13:22:47 [warn] 48507#48507: conflicting server name "app.domain.com" on 0.0.0.0:80, ignored
2021/11/03 13:22:47 [warn] 48507#48507: conflicting server name "app.domain.com" on [::]:80, ignored
2021/11/03 13:23:14 [warn] 48554#48554: conflicting server name "app.domain.com" on 0.0.0.0:80, ignored
2021/11/03 13:23:14 [warn] 48554#48554: conflicting server name "app.domain.com" on [::]:80, ignored

what is latest / current nginx conf file ?

[timconsidine]

@privsec said in SMS desktop app:

@privsec
I have confirmed that the all three nginx files use the LXC IP address, not the VPS IP address.

maybe I am having a brain outage, but why are there 3 nginx files ?

[privsec]

@timconsidine

Well, I’m now unable to load the server. It seems that after the reboot I requested it is just frozen at the boot stage.

So I’m gonna have to start over.

However, I kept running into errors with certbot originally, until I made a .wellknown folder

[privsec]

@timconsidine are there tried and true steps you do to setup certbot with ngoni every time?

[timconsidine]

@privsec all those difficulties doesn't seem right to me

What OS is on the VPS and what OS did you choose for the container ? (FYI on my installation it is Ubuntu 20.04 in both)

Given that we are dealing with a container here (and that it's not working), I would trash the containers and start over from the top.
lxc stop <container-name>
lxc rm <container-name>

Before creating the new container (can be same name as you used before if you prefer providing you remove it), I would make sure the VPS is up-to-date sudo apt-get update && sudo apt-get upgrade -y. And once the new container is created, I would do that same command again inside the new container.

[timconsidine]

@privsec said in SMS desktop app:

@timconsidine are there tried and true steps you do to setup certbot with ngoni every time?

I never have a problem with certbot except when I try to create a new certificate too soon after setting up the DNS, i.e. before it is propagated. To restrain my impatience :

• I usually ping -c 5 sub.domain.tld until I get responses.
• I always do nginx -t and systemctl reload nginx to ensure I get up-to-date nginx configs without any errors. Always have to resolve nginx errors before attempting a clean certbot certificate addition.

If you are having nginx or certbot issues, I would make sure system is up to date with sudo apt-get update && sudo apt-get upgrade -y

Oh, and be sure that all nginx and certbot work is done on the VPS, not while you are in the container.

Feel free to ping me in chat if you wish to step through.

[privsec]

@timconsidine said in SMS desktop app:

sudo apt-get update && sudo apt-get upgrade -y

I have wiped the VPS and started over.
But both had the ubuntu 20.04 version

[privsec]

@timconsidine

Ok, I got this working by following your guide, then for lets encrypt, I followed https://haydenjames.io/how-to-set-up-an-nginx-certbot/up to step 4

It is now live!

[timconsidine]

@privsec cool, well done !

[privsec]

@timconsidine This also handles calls just fine

[timconsidine]

@privsec : hadn't tested yet, thanks for doing that !

[robi]

@privsec said in SMS desktop app:

@timconsidine This also handles calls just fine

that would be great for GVoice

[privsec]

@robi Currently, the app only allows for Telnyx or a Twilio API key.

Does GVoice use an API key?