7 votes

Topic deleted by author

37 comments

  1. [3]
    smores
    (edited )
    Link
    For anyone following along (@cfabbro) we got it working!! The MariaDB container was failing to start up because we never configured a password for it. Woohoo!! The final docker-compose.yml:...
    • Exemplary

    For anyone following along (@cfabbro) we got it working!! The MariaDB container was failing to start up because we never configured a password for it. Woohoo!!

    The final docker-compose.yml:

    version: '2'
    
    volumes:
      nextcloud:
      db:
      caddy_data:
    
    services:
      db:
        image: mariadb
        command: --transaction-isolation=READ-COMMITTED --binlog-format=ROW
        restart: always
        volumes:
          - db:/var/lib/mysql
        ports:
          - 3306:3306
        environment:
          - MYSQL_ROOT_PASSWORD=***************
          - MYSQL_PASSWORD=******************
          - MYSQL_DATABASE=nextcloud
          - MYSQL_USER=nextcloud
    
      app:
        image: nextcloud
        ports:
          - 8080:80
        volumes:
          - nextcloud:/var/www/html
        restart: always
    
      caddy:
        image: caddy
        volumes:
          - "/etc/Caddyfile:/etc/caddy/Caddyfile"
          - "caddy_data:/data"
        ports:
          - 80:80
          - 443:443
        restart: always
    

    And final Caddyfile:

    domainname.com {
      header {
        Strict-Transport-Security "max-age=31536000; includeSubdomains; preload"
        Content-Security-Policy "default-src 'none';base-uri 'none';manifest-src 'self';script-src 'self' 'unsafe-eval';style-src 'self' 'unsafe-inline';img-src 'self$
        X-Robots-Tag "none"
      }
      reverse_proxy http://app:80
    }
    
    5 votes
    1. [2]
      cfabbro
      Link Parent
      Haha, isn't that just the worst when something like that happens? If I had a dollar for every minute I have wasted troubleshooting only to find out I missed something super fundamental/simple, I...

      The MariaDB container was failing to start up because we never configured a password for it.

      Haha, isn't that just the worst when something like that happens? If I had a dollar for every minute I have wasted troubleshooting only to find out I missed something super fundamental/simple, I would probably be a millionaire right now. :P

      Congats, and thanks for the ping. Also, you're an awesome person for being so generous with your time and expertise, @smores! :)

      1 vote
      1. smores
        Link Parent
        Hahaha yes! I’m glad we were able to get on a call, the real time log tailing made it very apparent what was wrong. Absolutely!! It was very nice to be able to help out; honestly it went even more...

        Hahaha yes! I’m glad we were able to get on a call, the real time log tailing made it very apparent what was wrong.

        Absolutely!! It was very nice to be able to help out; honestly it went even more smoothly than I expected!

        2 votes
  2. [34]
    smores
    Link
    I would highly recommend getting it set up with Docker. It’s much, much easier to manage the dependencies, permissions, and upgrades that way. If you could use some more guidance I can check back...

    I would highly recommend getting it set up with Docker. It’s much, much easier to manage the dependencies, permissions, and upgrades that way. If you could use some more guidance I can check back in tonight after work and try to help out! I’ve set up Nextcloud a few times now

    3 votes
    1. [34]
      Comment deleted by author
      Link Parent
      1. [33]
        smores
        Link Parent
        Sorry it's so late! I got caught up in a few other things. Happy to help though! What GCP platform are you using? Google Compute Engine? Google actually has some pretty great documentation for...

        Sorry it's so late! I got caught up in a few other things. Happy to help though!

        What GCP platform are you using? Google Compute Engine? Google actually has some pretty great documentation for setting up Docker on a GCE instance: https://cloud.google.com/compute/docs/containers/

        You could also use GKE, Google Kubernetes Engine, which is specifically for spinning up containerized (i.e. dockerized) applications. This might end up being more complicated in the long run, if you end up wanting a MySQL/MariaDB instance (instead of SQLite), and I'm actually not sure off the top of my head what work would need to be done to have a persistent volume for the actual files.

        Unless you have a particular desire to learn Kubernetes (it is a very cool platform!) it probably makes sense to stick to GCE. The docs for the nextcloud docker image actually give an example docker-compose.yml file for nextcloud with a mariadb database:

        version: '2'
        
        volumes:
          nextcloud:
          db:
        
        services:
          db:
            image: mariadb
            command: --transaction-isolation=READ-COMMITTED --binlog-format=ROW
            restart: always
            volumes:
              - db:/var/lib/mysql
            environment:
              - MYSQL_ROOT_PASSWORD=
              - MYSQL_PASSWORD=
              - MYSQL_DATABASE=nextcloud
              - MYSQL_USER=nextcloud
        
          app:
            image: nextcloud
            ports:
              - 8080:80
            links:
              - db
            volumes:
              - nextcloud:/var/www/html
            restart: always
        

        You can save that as a file, docker-compose.yml, in your home directory on your GCE instance, and then run docker-compose up -d, and once everything finishes installing and running, you'll have a working nextcloud instance!

        There are a few more steps (you'll want to make sure you get SSL and a domain name set up, and open ports 80 and 443 on your GCE host) but this is probably a good goal for now if this is your first experience with Docker. Definitely ask any questions and I'll do my best to help!

        3 votes
        1. [33]
          Comment deleted by author
          Link Parent
          1. [32]
            smores
            Link Parent
            I’m reading a bit more about the Container Optimized OS; it seems a little intense :/ haha it would probably be easiest to just use the Ubuntu base image instead, and use these instructions to...

            I’m reading a bit more about the Container Optimized OS; it seems a little intense :/ haha it would probably be easiest to just use the Ubuntu base image instead, and use these instructions to install Docker on it: https://docs.docker.com/engine/install/ubuntu/

            1 vote
            1. [32]
              Comment deleted by author
              Link Parent
              1. [31]
                smores
                Link Parent
                Awesome!! Installing Nextcloud should be as easy as creating a file named docker-compose.yml with the contents I posted above, and then running docker-compose up -d from the directory that file is in

                Awesome!! Installing Nextcloud should be as easy as creating a file named docker-compose.yml with the contents I posted above, and then running docker-compose up -d from the directory that file is in

                1 vote
                1. [31]
                  Comment deleted by author
                  Link Parent
                  1. [30]
                    smores
                    Link Parent
                    Ah! Yeah you'll need to start the Docker daemon. I think you should be able to do that with systemd: https://docs.docker.com/engine/install/linux-postinstall/#configure-docker-to-start-on-boot You...

                    Ah! Yeah you'll need to start the Docker daemon. I think you should be able to do that with systemd: https://docs.docker.com/engine/install/linux-postinstall/#configure-docker-to-start-on-boot

                    You can try something like

                    sudo service docker start
                    

                    To start it, and

                    sudo service docker status
                    

                    To make sure it started up correctly

                    1 vote
                    1. [30]
                      Comment deleted by author
                      Link Parent
                      1. [29]
                        smores
                        Link Parent
                        Huh! Could you show me the output from sudo service docker status?

                        Huh! Could you show me the output from sudo service docker status?

                        1 vote
                        1. [29]
                          Comment deleted by author
                          Link Parent
                          1. [28]
                            smores
                            Link Parent
                            Ah, you know what, you might need to run docker compose as root. Could you try sudo docker-compose up -d?

                            Ah, you know what, you might need to run docker compose as root. Could you try sudo docker-compose up -d?

                            1 vote
                            1. [28]
                              Comment deleted by author
                              Link Parent
                              1. [27]
                                smores
                                Link Parent
                                Woohoo! That’s great. The next steps are to get the ports opened and forwarded correctly. I’ll write something up tomorrow about how to get that working (you might be able to find it yourself,...

                                Woohoo! That’s great. The next steps are to get the ports opened and forwarded correctly. I’ll write something up tomorrow about how to get that working (you might be able to find it yourself, too!). Basically what you’re looking for is documentation on opening ports 80 and 443 on your GCE instance (it’s possible that there’s no work to do here and this is already working, I would just have to check). You’ll also want to change the port mapping in your docker compose file; right now it reads 8080:80, but we’ll want to set it to 80:80, so that when you type the IP address of your instance into your browser, you’ll be served your Nextcloud instance by default. Once those two steps are done, you should be able to visit your Nextcloud instance by just typing your instance’s IP address into your browser!

                                1 vote
                                1. [27]
                                  Comment deleted by author
                                  Link Parent
                                  1. [26]
                                    smores
                                    Link Parent
                                    Alright let's see what we can do! (sorry I didn't have a chance to look into this sooner, was having some issues with the lawn mower this morning!) So essentially what we're doing is creating an...
                                    • Exemplary

                                    Alright let's see what we can do! (sorry I didn't have a chance to look into this sooner, was having some issues with the lawn mower this morning!)

                                    So essentially what we're doing is creating an "ingress" rule in the Firewall for your network. Ingress rules specify how the firewall handles incoming connections. The steps for doing this are here. You're going to want to create a new ingress rule that allows traffic on the tcp protocol on port 80. Until you have a domain name and SSL set up (we can talk through how to do this, too), you might want to set a Source filter that only allows traffic from your home network.

                                    Then, like I mentioned above, you'll want to change the 8080:80 line to 80:80 in your docker-compose.yml, and you should be able to access your nextcloud instance by typing the IP address of your GCE instance into your browser!

                                    2 votes
                                    1. [2]
                                      cfabbro
                                      (edited )
                                      Link Parent
                                      Nothing of substance to add here, but I just wanted to say that you're awesome for being so helpful. Have an exemplary! :)

                                      Nothing of substance to add here, but I just wanted to say that you're awesome for being so helpful. Have an exemplary! :)

                                      2 votes
                                    2. [3]
                                      Comment deleted by author
                                      Link Parent
                                      1. [2]
                                        smores
                                        Link Parent
                                        Yes! Definitely. Once you have a domain name and SSL, you can open up the source filter so that it can be connected to from any IP, but you still want to make sure that you’re only exposing...

                                        Yes! Definitely. Once you have a domain name and SSL, you can open up the source filter so that it can be connected to from any IP, but you still want to make sure that you’re only exposing HTTP(S) ports (80 and 443) to the internet!

                                        2 votes
                                    3. [22]
                                      Comment deleted by author
                                      Link Parent
                                      1. [21]
                                        smores
                                        Link Parent
                                        Sweet!!! Actually, now that’s definitely working, before you fill out the setup, now might be a good time to get a reverse proxy set up with an SSL cert. I have to go for a run, but in the...

                                        Sweet!!! Actually, now that’s definitely working, before you fill out the setup, now might be a good time to get a reverse proxy set up with an SSL cert. I have to go for a run, but in the meantime, if you don’t have one already, now would be a good time to buy a domain name! I’ll write up some instructions to get set up with caddy when I get back!

                                        1 vote
                                        1. [21]
                                          Comment deleted by author
                                          Link Parent
                                          1. [20]
                                            smores
                                            (edited )
                                            Link Parent
                                            Ok! Let's do this. Step 1: You need to point your domain name at your server! If you haven't already, add an A record with your domain registrar that resolves to the IP address of your GCE...

                                            Ok! Let's do this.

                                            Step 1: You need to point your domain name at your server! If you haven't already, add an A record with your domain registrar that resolves to the IP address of your GCE instance. We'll need this in order to set up Caddy.

                                            Step 2: Make a new file named Caddyfile. This is the contents of the configuration for the caddy server. It should look like this:

                                            yourdomainname.com {
                                              header / {
                                                Strict-Transport-Security "max-age=31536000; includeSubdomains; preload"
                                                Content-Security-Ploicy "default-src 'none';base-uri 'none';manifest-src 'self';script-src 'self' 'unsafe-eval';style-src 'self' 'unsafe-inline';img-src 'self' data: blob:;font-src 'self';connect-src 'self';media-src 'self';frame-src 'self';child-src 'self'"
                                                X-Robots-Tag "none" # This will ask search engines _not_ to index your site! If you want to be indexed, remove this
                                              }
                                              proxy / localhost:8080 {
                                                transparent
                                                insecure_skip_verify
                                                websocket
                                              }
                                            }
                                            

                                            Happy to answer any questions about what's happening above!

                                            Step 3: We need to make some changes to the docker-compose.yml again. Here's what we need:

                                            version: '2'
                                            
                                            volumes:
                                              nextcloud:
                                              db:
                                              caddy_data:
                                            
                                            services:
                                              db:
                                                image: mariadb
                                                command: --transaction-isolation=READ-COMMITTED --binlog-format=ROW
                                                restart: always
                                                volumes:
                                                  - db:/var/lib/mysql
                                                environment:
                                                  - MYSQL_ROOT_PASSWORD=
                                                  - MYSQL_PASSWORD=
                                                  - MYSQL_DATABASE=nextcloud
                                                  - MYSQL_USER=nextcloud
                                            
                                              app:
                                                image: nextcloud
                                                ports:
                                                  - 8080:80  # Note that this is a back to 8080 again!
                                                links:
                                                  - db
                                                volumes:
                                                  - nextcloud:/var/www/html
                                                restart: always
                                            
                                              caddy:
                                                image: caddy
                                                volumes:
                                                  - "path/to/Caddyfile:/etc/caddy/Caddyfile" # Make sure you replace "path/to/Caddyfile" with the actual path to your Caddyfile that you made earlier!
                                                  - "caddy_data:/data"
                                                ports:
                                                  - 80:80
                                                  - 443:443
                                                restart: always
                                            

                                            Then if you restart docker-compose (sudo docker-compose down && sudo docker-compose up -d), you should find yourself able to get back to that settings page by going to your domain name in your browser!

                                            Full disclosure: I've never run Caddy via docker-compose before, so it's possible I mucked up that config file. Let me know if you run into any trouble!

                                            2 votes
                                            1. [20]
                                              Comment deleted by author
                                              Link Parent
                                              1. [18]
                                                smores
                                                Link Parent
                                                Cool! So it seems like Caddy wasn’t able to complete the ACME challenge it uses to get you an SSL cert. Most likely this means I messed up that docker compose :P Can you: copy/paste your current...

                                                Cool! So it seems like Caddy wasn’t able to complete the ACME challenge it uses to get you an SSL cert. Most likely this means I messed up that docker compose :P

                                                Can you:

                                                1. copy/paste your current docker-compose.yml in here?
                                                2. run sudo docker-compose logs and try to paste in any lines pertaining to the caddy container? Each line should be prefixed with the name of the container, so the caddy ones should start with something like [caddy_1]
                                                1 vote
                                                1. [18]
                                                  Comment deleted by author
                                                  Link Parent
                                                  1. smores
                                                    Link Parent
                                                    This is the issue, but I don’t know why. From reading the docs on the caddy docker image, it should be enough to just have 443:443 in the port mapping (which you do!). I’ll read a bit more about...

                                                    server is listening only on the HTTP port, so no automatic HTTPS will be applied to this server

                                                    This is the issue, but I don’t know why. From reading the docs on the caddy docker image, it should be enough to just have 443:443 in the port mapping (which you do!). I’ll read a bit more about the caddy docker setup and see if anything jumps out.

                                                    1 vote
                                                  2. [16]
                                                    smores
                                                    Link Parent
                                                    Oh, one more thing (this might be it?) You have - “/etc/Caddyfile”; you need to have - “path/to/Caddyfile:/etc/caddy/Caddyfile” instead. So, for example, if your Caddyfile is in /home/abc, you...

                                                    Oh, one more thing (this might be it?)

                                                    You have - “/etc/Caddyfile”; you need to have - “path/to/Caddyfile:/etc/caddy/Caddyfile” instead. So, for example, if your Caddyfile is in /home/abc, you need - “/home/abc/Caddyfile:/etc/caddy/Caddyfile”

                                                    1 vote
                                                    1. [16]
                                                      Comment deleted by author
                                                      Link Parent
                                                      1. [15]
                                                        smores
                                                        Link Parent
                                                        It looks like somehow that last quote after /etc/caddy/Caddyfile is a curly quote, instead of a straight quote. Try deleting it and retyping it. Also this might have just been a copy/paste issue,...

                                                        It looks like somehow that last quote after /etc/caddy/Caddyfile is a curly quote, instead of a straight quote. Try deleting it and retyping it.

                                                        Also this might have just been a copy/paste issue, but make sure that caddy: is also indented two spaces! It should be indented at the same level as db: and app:

                                                        1 vote
                                                        1. [15]
                                                          Comment deleted by author
                                                          Link Parent
                                                          1. [14]
                                                            smores
                                                            Link Parent
                                                            Ok! Could you show me: Your Caddyfile The caddy output from sudo docker-compose logs?

                                                            Ok! Could you show me:

                                                            1. Your Caddyfile
                                                            2. The caddy output from sudo docker-compose logs?
                                                            1 vote
                                                            1. [14]
                                                              Comment deleted by author
                                                              Link Parent
                                                              1. [13]
                                                                smores
                                                                Link Parent
                                                                You might need to change this to www.abc-cloud-xyz, since it seems like you're being redirected there. This isn't causing any of the issues we're currently seeing, but this should be...

                                                                abc-cloud.xyz

                                                                You might need to change this to www.abc-cloud-xyz, since it seems like you're being redirected there.

                                                                Content-Security-Ploicy

                                                                This isn't causing any of the issues we're currently seeing, but this should be Content-Security-Policy!

                                                                unrecognized directive: proxy

                                                                Womp, this is my bad. You're using Caddy v2; I gave you configuration for Caddy v1. I believe that entire proxy block

                                                                  proxy / localhost:8080 {
                                                                    transparent
                                                                    websocket
                                                                  }
                                                                

                                                                can be replaced with the new reverse_proxy directive

                                                                  reverse_proxy localhost:8080
                                                                

                                                                EDIT:

                                                                Also it looks like you can (should?) remove the / after header, so that it just reads

                                                                header {
                                                                
                                                                1. [13]
                                                                  Comment deleted by author
                                                                  Link Parent
                                                                  1. smores
                                                                    Link Parent
                                                                    Hahaha sure is. Request URL: https://www.abc-cloud.xyz/ Request Method: GET Remote Address: 34.72.140.170:443 Status Code: 502 Bad Gateway Version: HTTP/2 502 Bad Gateway means that caddy is for...

                                                                    Hahaha sure is.

                                                                    Request URL: https://www.abc-cloud.xyz/
                                                                    Request Method: GET
                                                                    Remote Address: 34.72.140.170:443
                                                                    Status Code: 502 Bad Gateway
                                                                    Version: HTTP/2

                                                                    502 Bad Gateway means that caddy is for some reason unable to communicate with the Nexcloud backend. Could you check the logs again?

                                                                    EDIT:

                                                                    Oh, you know what? I bet this is a docker networking thing. I'll poke around the docs a bit more.

                                                                  2. [11]
                                                                    smores
                                                                    Link Parent
                                                                    Ah, let's try replacing localhost:8080 in the Caddyfile with http://app:80

                                                                    Ah, let's try replacing localhost:8080 in the Caddyfile with http://app:80

                                                                    1. [11]
                                                                      Comment deleted by author
                                                                      Link Parent
                                                                      1. [10]
                                                                        smores
                                                                        Link Parent
                                                                        WOOHOO!! Admin username & password - yup, this is what you think it is The Data Folder field has /var/www/html/data by default so I guess I leave it? - This should be fine! Just note that this is...

                                                                        WOOHOO!!

                                                                        1. Admin username & password - yup, this is what you think it is

                                                                        2. The Data Folder field has /var/www/html/data by default so I guess I leave it? - This should be fine! Just note that this is on your GCE instance, so you'll have available to you however much storage your instance has

                                                                        3. Configure the database: I assume that I'll select MySQL/MariaDB - Yes!

                                                                          Database user? - nextcloud
                                                                          Database password? - no password, let me know if this causes any issues but it should be fine I think
                                                                          Database name? - nextcloud
                                                                          localhost? - the database host is db

                                                                        4. A checkbox to install (or not) recommended apps. Probably fine to leave this unchecked and add these as they become useful

                                                                        1. [10]
                                                                          Comment deleted by author
                                                                          Link Parent
                                                                          1. [9]
                                                                            smores
                                                                            Link Parent
                                                                            Hm. Let's try adding ports: - 3306:3306 To the db: part of the configuration, and then put db:3306 in the host field on the nextcloud setup page

                                                                            Hm. Let's try adding

                                                                              ports:
                                                                                - 3306:3306
                                                                            

                                                                            To the db: part of the configuration, and then put db:3306 in the host field on the nextcloud setup page

                                                                            1. [9]
                                                                              Comment deleted by author
                                                                              Link Parent
                                                                              1. [8]
                                                                                smores
                                                                                Link Parent
                                                                                Hm. Ok. Let's try adding a custom network so we can just use localhost (I really didn't think this would be the thing we'd get stuck on!) Here's what your docker-compose should look like now:...

                                                                                Hm. Ok. Let's try adding a custom network so we can just use localhost (I really didn't think this would be the thing we'd get stuck on!) Here's what your docker-compose should look like now:

                                                                                version: '2'
                                                                                
                                                                                volumes:
                                                                                  nextcloud:
                                                                                  db:
                                                                                  caddy_data:
                                                                                
                                                                                networks:
                                                                                  backend:
                                                                                
                                                                                services:
                                                                                  db:
                                                                                    image: mariadb
                                                                                    command: --transaction-isolation=READ-COMMITTED --binlog-format=ROW
                                                                                    restart: always
                                                                                    volumes:
                                                                                      - db:/var/lib/mysql
                                                                                    ports:
                                                                                      - 3306:3306
                                                                                    environment:
                                                                                      - MYSQL_ROOT_PASSWORD=
                                                                                      - MYSQL_PASSWORD=
                                                                                      - MYSQL_DATABASE=nextcloud
                                                                                      - MYSQL_USER=nextcloud
                                                                                    networks:
                                                                                      - backend
                                                                                
                                                                                  app:
                                                                                    image: nextcloud
                                                                                    ports:
                                                                                      - 8080:80
                                                                                    volumes:
                                                                                      - nextcloud:/var/www/html
                                                                                    networks:
                                                                                      - backend
                                                                                    restart: always
                                                                                
                                                                                  caddy:
                                                                                    image: caddy
                                                                                    volumes:
                                                                                      - "/etc/Caddyfile:/etc/caddy/Caddyfile"
                                                                                      - "caddy_data:/data"
                                                                                    ports:
                                                                                      - 80:80
                                                                                      - 443:443
                                                                                    restart: always
                                                                                

                                                                                Note the new networks entry at the top level, and also in the db and app service configs.

                                                                                I think this should let you just leave the default localhost. It's possible that this might also mean needing to change your Caddyfile; if after making this change you get a blank page again, try changing http://app:80 to http://backend:80 (hopefully you won't need to do that though).

                                                                                1. [3]
                                                                                  cfabbro
                                                                                  Link Parent
                                                                                  Goddamn, you two are still trying to sort this out? Madness!! Though it's awesome to see you still trying to help @suspended. :)

                                                                                  Goddamn, you two are still trying to sort this out? Madness!! Though it's awesome to see you still trying to help @suspended. :)

                                                                                  1 vote
                                                                                  1. [2]
                                                                                    smores
                                                                                    Link Parent
                                                                                    Hahahaha I think a giant tildes thread probably isn’t the most... efficient way to have this conversation :) honestly I’m pretty impressed at how far we’ve gotten in spite of that though!

                                                                                    Hahahaha I think a giant tildes thread probably isn’t the most... efficient way to have this conversation :) honestly I’m pretty impressed at how far we’ve gotten in spite of that though!

                                                                                    1 vote
                                                                                    1. cfabbro
                                                                                      Link Parent
                                                                                      Heh, it used to be wayyyyy worse before the (reply to above comment) feature. That pretty much solved the issue, at least from a technical perspective.

                                                                                      Heh, it used to be wayyyyy worse before the (reply to above comment) feature. That pretty much solved the issue, at least from a technical perspective.

                                                                                2. [5]
                                                                                  Comment deleted by author
                                                                                  Link Parent
                                                                                  1. [4]
                                                                                    smores
                                                                                    Link Parent
                                                                                    Hahahaha :sigh: remote debugging can be a little tough! Actually, I wonder if we’re at the point where it would make sense to have a quick video chat and try to work this out in real time? Up to...

                                                                                    Hahahaha :sigh: remote debugging can be a little tough!

                                                                                    Actually, I wonder if we’re at the point where it would make sense to have a quick video chat and try to work this out in real time? Up to you, I imagine it would go a lot faster though!

                                                                                    1 vote
                                                                                    1. [4]
                                                                                      Comment deleted by author
                                                                                      Link Parent
                                                                                      1. [3]
                                                                                        smores
                                                                                        Link Parent
                                                                                        We can use Jitsi! Are you free now-ish? I need like 15 minutes

                                                                                        We can use Jitsi! Are you free now-ish? I need like 15 minutes

                                                                                        1. [3]
                                                                                          Comment deleted by author
                                                                                          Link Parent
                                                                                          1. [2]
                                                                                            smores
                                                                                            Link Parent
                                                                                            Jitsi should work fine unless you only have Safari available? We can figure out something else if so, though. I have a Google Meet account through work, too

                                                                                            Jitsi should work fine unless you only have Safari available? We can figure out something else if so, though. I have a Google Meet account through work, too

                                              2. smores
                                                Link Parent
                                                Oh! Actually, I bet I know what's happening! You need to add one more Firewall rule. Same as before, now you're going to want to create a new ingress rule that allows traffic on the tcp protocol...

                                                Oh! Actually, I bet I know what's happening!

                                                You need to add one more Firewall rule. Same as before, now you're going to want to create a new ingress rule that allows traffic on the tcp protocol on port 443. 443 is the port that browsers use for HTTPS traffic by default, and it needs to be open in the firewall for the ACME challenge to work!

                                                1 vote