Issue with getting an LE SSL Cert for a proxy to a docker service

[Master Disaster]

I recently dockerised much of my homelab but now I've hit a bit of an issue.

 

I have Portainer running in Docker then an Apache Virtual Server acting as a port based proxy, I can access portainer perfectly.

 

When I try to get an SSL cert from LE it fails, I expected the file based challenge to fail since a proxy has no wwwroot but the DNS based challenge also fails and I have no idea why, there's no real error other than "DNS based acmechallenge failed, make sure the DNS A record is pointing to the correct IP".

 

Anyone got any ideas?

[Kilrah]

How are you trying to get the certificate?

certbot has integration with nginx so reads the config files and does its magic even on simple port redirects, maybe there's something similar with apache...

[Master Disaster]

1 hour ago, Kilrah said:

How are you trying to get the certificate?

certbot has integration with nginx so reads the config files and does its magic even on simple port redirects, maybe there's something similar with apache...

I think I have solved the issue but cannot actually test the fix yet, it now says I've failed to many attempts

 

It was the way I had my DNS servers setup, I was using CNAME on my web domain to forward subdomains to the main domain. I believe I have solved it by removing the CNAME subs and instead doing a full A records.

 

I'm using virtualmin and its running BIND locally, what I think was happening is LE was adding the challenge to my local DNS server but since my web domain was linking everything back to the main domain it wasn't seeing the changes on my local DNS for the sub.