Hi,
my mailcow is running on an esxi server. After installation of the mailcow acme works, mailcow got a cert. But now the first renewal don’t work. I have switched “SKIP_IP_CHECK” and “SKIP_HTTP_VERIFICATION” and “ENABLE_SSL_SNI” to yes. But it don’t work. Normaly it must work, if IP CHECK is switched off.
mailcowdockerized-acme-mailcow-1 | Mon Oct 24 20:07:47 CEST 2022 - Initializing, please wait...
mailcowdockerized-acme-mailcow-1 | Mon Oct 24 20:07:47 CEST 2022 - Using existing domain rsa key /var/lib/acme/acme/key.pem
mailcowdockerized-acme-mailcow-1 | Mon Oct 24 20:07:47 CEST 2022 - Using existing Lets Encrypt account key /var/lib/acme/acme/account.pem
mailcowdockerized-acme-mailcow-1 | Mon Oct 24 20:07:47 CEST 2022 - Detecting IP addresses...
mailcowdockerized-acme-mailcow-1 | Mon Oct 24 20:08:09 CEST 2022 - OK: xxx.xxx.xx.x, 0000:0000:0000:0000:0000:0000:0000:0000
mailcowdockerized-acme-mailcow-1 | Mon Oct 24 20:08:09 CEST 2022 - Found A record for autodiscover.example.com: y.x.zzz.yy
mailcowdockerized-acme-mailcow-1 | Mon Oct 24 20:08:09 CEST 2022 - Cannot match your IP xxx.xxx.xx.x against hostname autodiscover.example.com (DNS returned y.x.zzz.yy)
mailcowdockerized-acme-mailcow-1 | Mon Oct 24 20:08:10 CEST 2022 - Found A record for autoconfig.example.com: y.x.zzz.yy
mailcowdockerized-acme-mailcow-1 | Mon Oct 24 20:08:10 CEST 2022 - Cannot match your IP xxx.xxx.xx.x against hostname autoconfig.example.com (DNS returned y.x.zzz.yy)
mailcowdockerized-acme-mailcow-1 | Mon Oct 24 20:08:10 CEST 2022 - No A or AAAA record found for hostname autodiscover.example2.com
mailcowdockerized-acme-mailcow-1 | Mon Oct 24 20:08:10 CEST 2022 - No A or AAAA record found for hostname autoconfig.example2.com
mailcowdockerized-acme-mailcow-1 | Mon Oct 24 20:08:10 CEST 2022 - Found A record for mail2.example.com: y.x.zzz.yy
mailcowdockerized-acme-mailcow-1 | Mon Oct 24 20:08:10 CEST 2022 - Cannot match your IP xxx.xxx.xx.x against hostname mail2.example.com (DNS returned y.x.zzz.yy)
mailcowdockerized-acme-mailcow-1 | Mon Oct 24 20:08:10 CEST 2022 - Cannot validate any hostnames, skipping Let's Encrypt for 1 hour.
mailcowdockerized-acme-mailcow-1 | Mon Oct 24 20:08:10 CEST 2022 - Use SKIP_LETS_ENCRYPT=y in mailcow.conf to skip it permanently.
mailcowdockerized-acme-mailcow-1 | OK
I see that acme gets the IP from the esxi server, i don’t know why. On all other vm’s on the esxi host it works perfect, they got new certs. The IP y.x.zzz.yy is the IP from the mailcow host. How checked acme the own IP address? Is there a possibility to put the right IP in the mailcow.conf file or somewhere else?
Regards
Bernd