Nightscout Google Cloud -- Phase 2 certificate auto-renewal fails

[Bard09]

I am using Google Cloud for Nightscout and am getting the 502 Bad Gateway error. Running the Status reports an invalid certificate (see screenshot), so I am re-running the Phase 2 steps of the setup.

Everything appeared to go OK-- it prompted me for my FreeDNS details, I provided it, saw some text indicating that auto renewing was occurring, and then there was a pause that indicated a verification prompt was pending.

My guess is that this is a Captcha of some kind to defeat bots?

I was able to get a screenshot of the response after about 10-15s. The red text indicates that the Challenge failed and then there's some non-red text about cleaning up challenges.

It then prompts me to reboot, but on reboot the Status still indicates the certificate is invalid with the 502 Bad Gateway error.

Any tips on how to resolve the situation?

[Navid200]

If everything was working, it is hardly ever a need to run phase 2 to fix anything.

Can you log into your FreeDNS account?
Can you confirm that as a first step and let me know?

[Bard09]

I can login-- yes! Able to browse my nightscout redirect, etc.

…

On Wed, Feb 5, 2025 at 5:06 AM Navid ***@***.***> wrote: If everything was working, it is hardly ever a need to run phase 2 to fix anything. Can you log into your FreeDNS account? Can you confirm that as a first step and let me know? — Reply to this email directly, view it on GitHub <#3883 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ACLPDR3RVXYCJQ4ODFMR66T2OIEGVAVCNFSM6AAAAABWQJ2KI2VHI2DSMVQWIX3LMV43URDJONRXK43TNFXW4Q3PNVWWK3TUHMYTEMBWHEZTQMY> . You are receiving this because you authored the thread.Message ID: ***@***.*** .com>

[Navid200]

By any chance, have you set up a firewall?
The firewall work is a work in progress.
You could mess up the status page really badly if you use firewalls.
Assuming the tests succeed, we will have some work to do to finalize everything.

What do you mean that you can browse your Nightscout? So, you can bring up your Nightscout in a browser? Then, what's the problem other than the status page?

[Bard09]

I haven't set up a firewall as far as I know. Sorry about my inaccurate language-- in FreeDNS, I'm able to see the subdomain that I am using for my Nightscout.

Given the error message indicates that a challenge was failed, I'm assuming there's something captcha related that is not working related to the Phase 2 authentication.

The only reason I was running Phase 2 steps was that I was seeing 502 Bad Gateway and the invalid certificate reported under the Status screen.

If you have a recommended alternate approach to fix the cert issue I'm all ears!

[Navid200]

Sure, please run phase 1.
After it is completed, please restart the server.
Don't run after reboot. Give it 2 minutes after reboot.
Does it work or do you still get an error.
If it still doesn't work, run phase 2.

But, be prepared to take a screenshot if it shows the error again. I need to see the error message. If you have to, use a screen recorder so that you capture a video. Then, you can go through the video and stop it when it shows the error and take a screenshot.

Or, does it work this time?