Certbot

alex.olynyk

I setup a CNAME internally because i gave owncloud a different name internally. owncloud.rose.internal

StrongBad

@alex.olynyk said in Certbot:

I setup a CNAME internally because i gave owncloud a different name internally. owncloud.rose.internal

Won't that cause issues? ownCloud requires DNS to be consistent between internal and external, doesn't it?

Alex Sage

@alex.olynyk Why? Why can't everyone just use the .com? Am I missing something?

Alex Sage

@StrongBad said in Certbot:

@alex.olynyk said in Certbot:

I setup a CNAME internally because i gave owncloud a different name internally. owncloud.rose.internal

Won't that cause issues? ownCloud requires DNS to be consistent between internal and external, doesn't it?

I would think so....

wirestyle22

Any ideas?

alex.olynyk

can i post my DNS config so you can have a look?

scottalanmiller

@alex.olynyk said in Certbot:

can i post my DNS config so you can have a look?

Yes

wirestyle22

I'd appreciate any information right now

alex.olynyk

wirestyle22

I'm in a different situation. I'm hosting my OwnCloud server with Vultr on CentOS 7. I followed the directions but I get the errors that I listed above. Unsure what I need to do on CentOS.

Do I need to specify the ServerName or does CertBot make that irrelevant?
Do I need to setup a vhost or is the ssl.conf what I am supposed to use by default?
Is the failed authorization procedure due to Google or is it my settings?

alex.olynyk

@wirestyle22 I had to specify the servername
i used the ssl.conf default

Dashrender

@alex.olynyk said in Certbot:

Where is your Roseradiology.com DNS domain? I don't see it in the list.

alex.olynyk

we dont have one. its just rose.internal

Dashrender

You need to create one. That's what allows you to use different, internal IPs for that roseradiology.com domain while inside your network.

that's what makes split horizon DNS.

Alex Sage

@Dashrender But Why? Why host any roseradiology.com DNS locally? Speed?

StrongBad

@aaronstuder I am confused here, too. I don't see where the benefit is in this setup.

Alex Sage

@StrongBad The only thing I can think of is speed? Maybe it's a bit faster? However many routers have loopback NAT, so no difference there.

Alex Sage

@wirestyle22 Can you start a new topic? It's hard to keep track here.

Alex Sage

@alex-olynyk remove roseradiology.com from your local DNS complerely, then try again after flushing DNS. I bet it works.

alex.olynyk

@aaronstuder removed and flushed but no change