Dokploy•6mo ago

Traefik + Pgadmin, maybe certification issue, causing 404 not found

I am trying to put pgadmin on dokploy and behind traefik. The reason I am doing that is because my db (postgres) is also hosted with dokploy and the port is only accessible inside the container (I am using expose instead of ports), so its not public facing. Thus, I cannot use a local pgadmin from my laptop and connect to the db since the port is not accessible. So, my thought is to deploy a pgadmin container as well (they are all in the same docker-compose with the same network value) so I can see into the db. But it is not working, I have a hunch that it is because traefik cannot generate certs for it, because when I look at acme it doesnt have the key for the domain I set it to (I have also set the DNS in cloudflare). Here is the error

Unable to obtain ACME certificate for domains error="unable to generate a certificate for the domains [my.domain.com]: error: one or more domains had a problem:\n[my.domain.com] acme: error: 403 :: urn:ietf:params:acme:error:unauthorized :: 2606:4700:20::ac43:49dc: Invalid response from https://perfectdomain.com/domain/alfrd.com: 403\n

When I try to refresh traefik, it also throws an error. Let me know if I can provide anything else to better make this clear. This is my first time messing around with VPS, networking, etc.

28 Replies

Siumauricio•6mo ago

are you tring to assign a domain to a postgres database?

FirdausOP•6mo ago

to pgadmin

Siumauricio•6mo ago

did you pointed the IP of the vps to your server?

FirdausOP•6mo ago

in cloudflare you mean? yes I have added the domain for pgadmin I wanted to use and the IP of my vps there

Siumauricio•6mo ago

how did you pointed the domain ? and also how did you created the domain in dokploy

FirdausOP•6mo ago

https://cdn.discordapp.com/attachments/1302704635542241380/1302704636700135456/Group_1.png?ex=6729be7c&is=67286cfc&hm=a35ef41e4113840f307616505e6aab2aab86b90378056bc2a188b1aaa7708d08&

FirdausOP•6mo ago

this is how I did it in cloudflare

Siumauricio•6mo ago

ok looks good and in dokploy how did you set the domain?

FirdausOP•6mo ago

FirdausOP•6mo ago

its the pgadmin one the url in dokploy is the same as the one in cloudflare and when I try to access it in my browser, I got 404 not found and this is my docker-compose.yml. The one in dokploy has been populated automatically, but this is what is in my repo

pgadmin:
    container_name: pgadmin
    image: dpage/pgadmin4:2024-10-19-2
    ports:
      - port:port
    environment:
      - PGADMIN_DEFAULT_EMAIL=<email>
      - PGADMIN_DEFAULT_PASSWORD=<pass>
      - PGADMIN_LISTEN_PORT=<port>
    networks:
      - dokploy-network
    labels:
     - "traefik.enable=true"
     - "traefik.http.routers.pgadmin-app.entrypoints=websecure"
     - "traefik.http.routers.pgadmin-app.tls.certResolver=letsencrypt"
     - "traefik.http.routers.pgadmin-app.rule=Host(`my.domain.com`)"
     - "traefik.http.services.pgadmin-app.loadbalancer.server.port=<port>"

pgadmin:
    container_name: pgadmin
    image: dpage/pgadmin4:2024-10-19-2
    ports:
      - port:port
    environment:
      - PGADMIN_DEFAULT_EMAIL=<email>
      - PGADMIN_DEFAULT_PASSWORD=<pass>
      - PGADMIN_LISTEN_PORT=<port>
    networks:
      - dokploy-network
    labels:
     - "traefik.enable=true"
     - "traefik.http.routers.pgadmin-app.entrypoints=websecure"
     - "traefik.http.routers.pgadmin-app.tls.certResolver=letsencrypt"
     - "traefik.http.routers.pgadmin-app.rule=Host(`my.domain.com`)"
     - "traefik.http.services.pgadmin-app.loadbalancer.server.port=<port>"

Siumauricio•6mo ago

did you deploy again?

FirdausOP•6mo ago

yeah, I have deployed, rebuild, restart the container etc. still no luck

unable to generate a certificate for the domains [my.domain.com]: acme: error: 429 :: POST :: https://acme-v02.api.letsencrypt.org/acme/new-order :: urn:ietf:params:acme:error:rateLimited :: too many failed authorizations (5) for \"my.domain.com\" in the last 1h0m0s, retry after 2024-11-04 15:45:58 UTC: see https://letsencrypt.org/docs/rate-limits/#authorization-failures-per-hostname-per-account

unable to generate a certificate for the domains [my.domain.com]: acme: error: 429 :: POST :: https://acme-v02.api.letsencrypt.org/acme/new-order :: urn:ietf:params:acme:error:rateLimited :: too many failed authorizations (5) for \"my.domain.com\" in the last 1h0m0s, retry after 2024-11-04 15:45:58 UTC: see https://letsencrypt.org/docs/rate-limits/#authorization-failures-per-hostname-per-account

Siumauricio•6mo ago

what mode you have in cloudflare? flexible or full strict?

FirdausOP•6mo ago

full strict my other container can be accesed from the internet with this whole setup, except for this pgadmin

Siumauricio•6mo ago

hmm can I have access to your server if you don't mind? Something is missing I think

FirdausOP•6mo ago

i dont mind, but I think that would be the last resort, i can run any commands you give me

Siumauricio•6mo ago

the other applications are working and accessible to a domain?

FirdausOP•6mo ago

yes they are all in the same docker-compose

Siumauricio•6mo ago

in the ports settings what did you set for?

FirdausOP•6mo ago

pgadmin port was originally set to 80, but that clashes with traefik i believe, so I changed it to something else

Siumauricio•6mo ago

just set 80 if we only set the container to be on the internal port 80 it doesnt matter

Siumauricio•6mo ago

check this https://docs.dokploy.com/en/docs/core/troubleshooting/overview#docker-compose-domain-not-working

Overview

Solve the most common problems that occur when using Dokploy.

FirdausOP•6mo ago

but isnt traefik using 80?

Siumauricio•6mo ago

Yes, but as we said in the docs is not necessary to expose the ports

FirdausOP•6mo ago

k let me try solved, but not for the reasons we thought

FirdausOP•6mo ago

https://serverfault.com/questions/1134033/strict-mime-type-checking-is-enabled-issue-with-pgadmin-in-azure-application-gat

Server Fault

strict MIME type checking is enabled issue with PGAdmin in Azure ap...

I am trying to install pgAdmin (image: 'dpage/pgadmin4:6.21') in Azure AKS. I am able to access the application when I use a Kubernetes LoadBalancer service, but when I use an Azure Application Gat...

FirdausOP•6mo ago

      - PGADMIN_CONFIG_X_CONTENT_TYPE_OPTIONS=""
      - PGADMIN_CONFIG_X_XSS_PROTECTION="0"
      - PGADMIN_CONFIG_ENHANCED_COOKIE_PROTECTION=False

      - PGADMIN_CONFIG_X_CONTENT_TYPE_OPTIONS=""
      - PGADMIN_CONFIG_X_XSS_PROTECTION="0"
      - PGADMIN_CONFIG_ENHANCED_COOKIE_PROTECTION=False

Added this to pgadmin docker-compose at one point I was able to access the service, but it still threw an error

Siumauricio•6mo ago

Nice

Gaming

Programming

Traefik + Pgadmin, maybe certification issue, causing 404 not found

Did you find this page helpful?