SOLVED Can't access Cloudron

[neurokrish]

I was playing with a few VMs hosted elsewhere and used the same domain as my Cloudron server with certbot. Now, I can't login to my Cloudron server anymore (perhaps due to a mismatch in certificates for the same domain?). Is there a way to correct this via CLI?

[nebulon]

Most likely this is a client issue, so you may have to "forget" that domain in your browser history so it clears things like HSTS for certs...

[neurokrish]

@nebulon I tried to access the site from a couple of devices. Same result. Can't access. Rebooted Cloudron a few times as well. Can I copy over the newly generated certificates to Cloudron somehow or can I force Cloudron to get a new certificate? Is it possible to force cloudron to use a self-signed certificate instead of Letsencrypt and change things once I get to login?

[nebulon]

@neurokrish would be good to know why it is failing, like what the error in the browser is and why you can't overwrite that to reach the dashboard at least to manually renew certs.

For example it is not clear, why new certificates would render the existing ones invalid (in case they are still valid time-wise). You can also send a mail at support@cloudron.io with your domain, if you don't want to reveal it here. Then can check what certs are served up and where the issue is.

Otherwise, on Cloudron the live-certs are located at /home/yellowtent/platformdata/nginx/cert/ so you could see if you can copy your other ones matching the dashboard domain there and then reload nginx with nginx -s reload. Ideally make a copy of the existing folder first as backup.

[neurokrish]

@nebulon I will send an email to support. I just assumed that getting new certificates issued for the same domain from Letsencrypt will revoke the old one. So, not sure.

At the moment, there are no errors displayed. The site would not open at all. I will have a look at a few other things and report back. For e.g., I use Cloudflare for this site. May be something has gone wrong there.

[nebulon]

@neurokrish if you use Cloudflare then also check the section about this at https://docs.cloudron.io/domains/#cloudflare-dns for investigation.

[jdaviescoates]

@neurokrish said in Can't access Cloudron:

I use Cloudflare for this site. May be something has gone wrong there.

This seems rather common. People use Cloudflare thinking it'll give them better uptime but it instead results in more downtime (and a way too overly centralised internet, see eg this oldie but imho still relevant article https://tech.tiq.cc/2016/01/why-you-shouldnt-use-cloudflare/ )

[neurokrish]

@jdaviescoates very valid points in the article. Thanks for sharing. I like to use Cloudflare to hide my server's IP and restrict access to my server geographically. Other things on Cloudflare don't matter to me. In fact, if there is a way to restrict geographical access to my Cloudron, I would give up Cloudflare. I am not sure if this can be done in Cloudron or how. Any ideas? Sorry, off topic to the original post!

[neurokrish]

@nebulon sent a message to support with my domain information. Let me know if you guys need anything else.

[neurokrish]

Thanks to @nebulon. After troubleshooting a few things on my network, we figured out that the access problem to my Cloudron is due to my ISP suddenly blocking ports 80 and 443. Please mark this issue as resolved!