Hello! I'm aiming to get funkwhale running on my Raspberry Pi 4 to use while inside the network and on the go via a Wireguard VPN (that is already functional on the RPI4). I've run the quick install command and entered the following details:
`Installation summary:
- version: 1.1.4
- domain: music.my.domain
- Admin username: admin
- Admin email: funkwhale@my.domain
- Manage nginx and certbot: true
- Manage redis: true
- Manage systemd unit files: true
- Manage PostgreSQL: true
`
There was a total of one error during the run time of the script, according to the summary:
PLAY RECAP *********************************************************************
127.0.0.1 : ok=37 changed=26 unreachable=0 failed=1 skipped=15 rescued=0 ignored=0
This is the error output:
TASK [funkwhale : Create letsencrypt certificate] ******************************
fatal: [127.0.0.1]: FAILED! => {"changed": true, "cmd": ["certbot", "-v", "-n", "certonly", "--nginx", "-m", "funkwhale@my.domain", "--agree-tos", "-d", "music.my.domain"], "delta": "0:00:13.880233", "end": "2021-10-20 11:58:42.381887", "msg": "non-zero return code", "rc": 1, "start": "2021-10-20 11:58:28.501654", "stderr": "Saving debug log to /var/log/letsencrypt/letsencrypt.log\nPlugins selected: Authenticator nginx, Installer nginx\nPerforming the following challenges:\nhttp-01 challenge for music.my.domain\nWaiting for verification...\nChallenge failed for domain music.my.domain\nhttp-01 challenge for music.my.domain\nCleaning up challenges\nSome challenges have failed.\nAsk for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details.", "stderr_lines": ["Saving debug log to /var/log/letsencrypt/letsencrypt.log", "Plugins selected: Authenticator nginx, Installer nginx", "Performing the following challenges:", "http-01 challenge for music.darius.email", "Waiting for verification...", "Challenge failed for domain music.my.domain", "http-01 challenge for music.my.domain", "Cleaning up challenges", "Some challenges have failed.", "Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /var/log/letsencrypt/letsencrypt.log or re-run Certbot with -v for more details."], "stdout": "Account registered.\nRequesting a certificate for music.my.domain\n\nCertbot failed to authenticate some domains (authenticator: nginx). The Certificate Authority reported these problems:\n Domain: music.my.domain\n Type: dns\n Detail: DNS problem: NXDOMAIN looking up A for music.my.domain - check that a DNS record exists for this domain\n\nHint: The Certificate Authority failed to verify the temporary nginx configuration changes made by Certbot. Ensure the listed domains point to this nginx server and that it is accessible from the internet.", "stdout_lines": ["Account registered.", "Requesting a certificate for music.my.domain", "", "Certbot failed to authenticate some domains (authenticator: nginx). The Certificate Authority reported these problems:", " Domain: music.my.domain", " Type: dns", " Detail: DNS problem: NXDOMAIN looking up A for music.my.domain - check that a DNS record exists for this domain", "", "Hint: The Certificate Authority failed to verify the temporary nginx configuration changes made by Certbot. Ensure the listed domains point to this nginx server and that it is accessible from the internet."]}
Navigating to the local IP of my RPI4 in a browser shows the following:
Welcome to nginx!
If you see this page, the nginx web server is successfully installed and working. Further configuration is required.
For online documentation and support please refer to nginx.org.
Commercial support is available at nginx.com.
Thank you for using nginx.
To be clear, the domain "my.domain" has no relevance with my RPI4 whatsoever (I use it as a custom email domain) and I didn't take any steps to point the subdomain "music.my.domain" to my RPI4. In hind-sight, maybe I should've done something with the dynamic DNS service (freedns.afraid.org) which is part of the Wireguard config files. But I feel like I shouldn't need to make funkwhale accessible to the web, as I only plan to use it locally or via a VPN (which I think is equivalent to local network use). That would also mean there's no point in generating a SSL certificate.
Does this mean I can redo the installation and enter the local IP of my RPI4 as the domain? If so, what should I do with the current instance that is not functional? (Apologies if I am rambling nonsense)
Thank you for trying to help! 😄
