ngnix reverse proxy manager : Could not SSL certificate Let's OK with error message!

[nonelocker]

Describe the issue
A clear and concise description of what the bug is.

When SSL certificate, following error ocurs :

Error: Command failed: . /opt/certbot/bin/activate && pip install --no-cache-dir --user certbot-dns-dynu~=0.0.1 && deactivate
ERROR: Can not perform a '--user' install. User site-packages are not visible in this virtualenv.

at ChildProcess.exithandler (node:child_process:402:12)
at ChildProcess.emit (node:events:513:28)
at maybeClose (node:internal/child_process:1100:16)
at Process.ChildProcess._handle.onexit (node:internal/child_process:304:5)

if remove '--user', it works. but following error ocurs :

Error: Command failed: certbot certonly --config "/etc/letsencrypt.ini" --work-dir "/tmp/letsencrypt-lib" --logs-dir "/tmp/letsencrypt-log" --cert-name "npm-3" --agree-tos --email "xxx@gmail.com" --domains "*.xxx.giize.com" --authenticator dns-dynu --dns-dynu-credentials "/etc/letsencrypt/credentials/credentials-3" --dns-dynu-propagation-seconds 120
usage:
certbot [SUBCOMMAND] [options] [-d DOMAIN] [-d DOMAIN] ...

Certbot can obtain and install HTTPS/TLS/SSL certificates. By default,
it will attempt to use a webserver both for obtaining and installing the
certificate.
certbot: error: unrecognized arguments: --dns-dynu-credentials /etc/letsencrypt/credentials/credentials-3 --dns-dynu-propagation-seconds 120

at ChildProcess.exithandler (node:child_process:402:12)
at ChildProcess.emit (node:events:513:28)
at maybeClose (node:internal/child_process:1100:16)
at Process.ChildProcess._handle.onexit (node:internal/child_process:304:5)

====================================================================================

So, I retry with docker version. but there is no error and is issued SSL certification.
Please check this problem. ( all version is 2.10.1 )

Bug reports will be closed after 12 hours of NO activity.

[tteck]

I just requested a new SSL Certificate from Let's Encrypt without issues.

[JuneTwooo]

Same here + ERR_HTTP2_PROTOCOL_ERROR for every request since 2.10.1

[tteck]

Can I replicate this problem somehow?

[tteck]

I observed that the Docker image is currently operating on version 2.10.2, whereas the latest version labeled in the repository is 2.10.1. However, version 2.10.2 is available in the repository, so I updated the dev branch to version 2.10.2 for testing purposes.

bash -c "$(wget -qLO - https://github.com/tteck/Proxmox/raw/dev/ct/nginxproxymanager.sh)"

[JuneTwooo]

the ERR_HTTP2_PROTOCOL_ERROR error seem to be resolved but i can't access into the admin page : 502 Bad Gateway

[tteck]

Did you try a reboot?

[JuneTwooo]

yes, same, backed up on 2.9.21 and all work fine

[nicedevil007]

so I tested the dev branch script and that worked like a charm. Doesn't matter if I deploy a new nginxproxylxc with it or updating my old 2.9.22 with it.

I also can confirm that the updating process of letsencrypt certs is working

[nsaneadmin]

I was able to fix this by going to "nano /opt/certbot/pyvenv.cfg then updating value include-system-site-packages to true from false.

[ColtonHenning]

This worked for me. I tried the updated script and it didn't seem to work, but this did. Thanks!

[JuneTwooo]

Worked to, thanks @tteck and @nsaneadmin

[ColtonHenning]

I think they made a change to /app/setup.js to help with non-root user installs. I removed the "--no-cache-dir --user" from /app/setup.js and restored include-system-site-packages = false and it worked right away. Hope this helps.

Here's the change they made.
NginxProxyManager/nginx-proxy-manager@77eb618

[tteck]

In my case, setting the user as root resolved the issue, as seen in line 188.

Proxmox/install/nginxproxymanager-install.sh

Line 188 in 76479a7

sed -i -e 's/^pid/#pid/' -e 's/npmuser/root/' /usr/local/openresty/nginx/conf/nginx.conf

I will change include-system-site-packages = false When this option is set to true, the Python interpreter will include packages installed in the global site-packages.

[tteck]

Proxmox/install/nginxproxymanager-install.sh

Line 189 in 322de1f

sed -i 's/include-system-site-packages = false/include-system-site-packages = true/g' /opt/certbot/pyvenv.cfg

Proxmox/ct/nginxproxymanager.sh

Line 167 in d0ccf41

sed -i 's/include-system-site-packages = false/include-system-site-packages = true/g' /opt/certbot/pyvenv.cfg

[ColtonHenning]

Awesome thanks!