Challenges fail when using envsubst template for nginx configuration.

[SolnLase]

I've come across an issue where challenges didn't pass. After experimenting for a while I found out that binding nginx template file to a template file in /etc/nginx/templates/, except for just including a normal conf file in conf.d is causing this issue. How can I rewrite this script so it works with envsubst templates for conf files in conf.d?

[pmeaney]

HI @SolnLase check out this example I setup, using @wmnnd 's initial example.

I think taking a look at it will solve your question.

https://github.com/clicksandcodes/ccc-nginx-certbot/

It uses envsubst and nginx conf templates. I also template-ized the project's shell file.
Edit the .env file to add your preferred domain or IP address.
In four commands (their env var needs editing as well-- to add your domain or the IP, and your email address), you can get an http & https endpoint running.

the endpoints will be:

• http://yourDomain.com/healthcheck
• https://yourDomain.com/healthcheck

[destiny356]

just change data/nginx/app.conf to this

server {
    listen 80;
    server_name example.org;
    server_tokens off;

    location /.well-known/acme-challenge/ {
        root /var/www/certbot;
    }

    location / {
        return 301 https://$host$request_uri;
    }
}

Reload Nginx, the first nginx refers to container_name of Nginx service
docker exec -it nginx nginx -s reload

Run the script
./init-letsencrypt.sh

it will successfully generate the cert

Then edit data/nginx/app.conf, add

server {
    listen 443 ssl;
    server_name example.org;
    server_tokens off;

    ssl_certificate /etc/letsencrypt/live/example.org/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/example.org/privkey.pem;
    include /etc/letsencrypt/options-ssl-nginx.conf;
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem;

    location / {
        proxy_pass  http://example.org;
        proxy_set_header    Host                $http_host;
        proxy_set_header    X-Real-IP           $remote_addr;
        proxy_set_header    X-Forwarded-For     $proxy_add_x_forwarded_for;
    }
}

Reload Nginx
docker exec -it nginx nginx -s reload
docker compose up -d

Don't forget to change example.org to your domain