Real TLS certificates get swapped with "localhost" certificates - no connection possible #1484
Description
Checklist
- Have you pulled and found the error with
jc21/nginx-proxy-manager:latestdocker image?- Yes
- Are you sure you're not using someone else's docker image?
- Yes
- Have you searched for similar issues (both open and closed)?
- Yes
Describe the bug
Everything worked fine and suddenly all reverse-proxied sites (including the npm webpage) show an invalid certificate (localhost). I cannot skip the error message in chrome because of "ERR_EMPTY_RESPONSE". I havent touched a thing.
the npm log doesn't show anything. Restarting the docker containers dont resolve the problem either.
Nginx Proxy Manager Version
v2.9.9
To Reproduce
Steps to reproduce the behavior:
I dont know how to reproduce it because I didnt do anything.
Expected behavior
The real certificates should be delivered and one should access the reverse-proxied sites as normal.
Screenshots
Operating System
ubuntu 20.04lts
Additional context
Docker version 20.10.9, build c2ea9bc
docker-compose version 1.29.2, build 5becea4c
Browser Chromium 94.0.4606.81 (Tried it in other browsers as well, same behaviour)
Last logs (after restart of the container) show this:
[s6-init] making user provided files available at /var/run/s6/etc...exited 0.
[s6-init] ensuring user provided files have correct perms...exited 0.
[fix-attrs.d] applying ownership & permissions fixes...
[fix-attrs.d] done.
[cont-init.d] executing container initialization scripts...
[cont-init.d] 01_perms.sh: executing...
Changing ownership of /data/logs to 0:0
[cont-init.d] 01_perms.sh: exited 0.
[cont-init.d] 01_s6-secret-init.sh: executing...
[cont-init.d] 01_s6-secret-init.sh: exited 0.
[cont-init.d] done.
[services.d] starting services
[services.d] done.
❯ Enabling IPV6 in hosts: /etc/nginx/conf.d
❯ /etc/nginx/conf.d/production.conf
❯ /etc/nginx/conf.d/default.conf
❯ /etc/nginx/conf.d/include/block-exploits.conf
❯ /etc/nginx/conf.d/include/proxy.conf
❯ /etc/nginx/conf.d/include/ssl-ciphers.conf
❯ /etc/nginx/conf.d/include/ip_ranges.conf
❯ /etc/nginx/conf.d/include/assets.conf
❯ /etc/nginx/conf.d/include/letsencrypt-acme-challenge.conf
❯ /etc/nginx/conf.d/include/force-ssl.conf
❯ /etc/nginx/conf.d/include/resolvers.conf
❯ Enabling IPV6 in hosts: /data/nginx
❯ /data/nginx/proxy_host/3.conf
❯ /data/nginx/proxy_host/1.conf
❯ /data/nginx/proxy_host/4.conf
❯ /data/nginx/default_host/site.conf
[10/14/2021] [10:13:46 AM] [Global ] › ℹ info Generating MySQL db configuration from environment variables
[10/14/2021] [10:13:46 AM] [Global ] › ℹ info Wrote db configuration to config file: ./config/production.json
[10/14/2021] [10:13:49 AM] [Migrate ] › ℹ info Current database version: 20210423103500
[10/14/2021] [10:13:49 AM] [Setup ] › ℹ info Creating a new JWT key pair...
[10/14/2021] [10:14:10 AM] [Setup ] › ℹ info Wrote JWT key pair to config file: /app/config/production.json
[10/14/2021] [10:14:10 AM] [Setup ] › ℹ info Logrotate Timer initialized
[10/14/2021] [10:14:10 AM] [Setup ] › ℹ info Logrotate completed.
[10/14/2021] [10:14:10 AM] [IP Ranges] › ℹ info Fetching IP Ranges from online services...
[10/14/2021] [10:14:10 AM] [IP Ranges] › ℹ info Fetching https://ip-ranges.amazonaws.com/ip-ranges.json
[10/14/2021] [10:14:10 AM] [IP Ranges] › ℹ info Fetching https://www.cloudflare.com/ips-v4
[10/14/2021] [10:14:10 AM] [IP Ranges] › ℹ info Fetching https://www.cloudflare.com/ips-v6
[10/14/2021] [10:14:10 AM] [SSL ] › ℹ info Let's Encrypt Renewal Timer initialized
[10/14/2021] [10:14:10 AM] [SSL ] › ℹ info Renewing SSL certs close to expiry...
[10/14/2021] [10:14:10 AM] [IP Ranges] › ℹ info IP Ranges Renewal Timer initialized
[10/14/2021] [10:14:10 AM] [Global ] › ℹ info Backend PID 236 listening on port 3000 ...
[10/14/2021] [10:14:12 AM] [Nginx ] › ℹ info Reloading Nginx
[10/14/2021] [10:14:12 AM] [SSL ] › ℹ info Renew Complete