Unable to access any web pages, emails or calendar events.

mc-ird

Background:
I moved my email off site, but retained the mailcow server for internal access (I work from home and have some sensitive log files various internal servers email me as well as archive history for reference)

Since the move the mailcow ACME server has not had external access and today the cert expired killing access to the web services and email.

I have tried going through the guides - both to update the cert (it failed even after opening the ports and recreating the appropriate A-record for the server on the public DNS.

I also tried to set up a manual cert - but I am getting nowhere with that either.

A further issue is that docker compose up -d results in the folllowing
docker compose up -d [+] Running 11/11 ✔ Container mailcowdockerized-memcached-mailcow-1 Running 0.0s ✔ Container mailcowdockerized-olefy-mailcow-1 Running 0.0s ✔ Container mailcowdockerized-netfilter-mailcow-1 Running 0.0s ✔ Container mailcowdockerized-dockerapi-mailcow-1 Running 0.0s ✘ Container mailcowdockerized-unbound-mailcow-1 Error 0.5s ✔ Container mailcowdockerized-sogo-mailcow-1 Running 0.0s ✔ Container mailcowdockerized-redis-mailcow-1 Running 0.0s ✔ Container mailcowdockerized-mysql-mailcow-1 Running 0.0s ✔ Container mailcowdockerized-dovecot-mailcow-1 Running 0.0s ✔ Container mailcowdockerized-ofelia-mailcow-1 Running 0.0s ✔ Container mailcowdockerized-php-fpm-mailcow-1 Running 0.0s dependency failed to start: container mailcowdockerized-unbound-mailcow-1 is unhealthy

Can anyone help me retrieve access to this server using ideally a manually obtained cert, or have I lost this for good?

DocFraggle

mc-ird you could try to disable the unbound health check in your mailcow.conf

# Skip Unbound (DNS Resolver) Healthchecks (NOT Recommended!) - y/n
SKIP_UNBOUND_HEALTHCHECK=y

Then restart the stack

esackbauer

Without logs its hard to tell…
So did you change anything to your external DNS when you “moved your email offsite” (whatever that means)?
Did you change anything else like firewall rules etc when you changed your mailcow to internal LAN only?

mc-ird

I’ll give that a try … thank you.

[unknown]
Yes, logs would be useful - not too sure what would be suitable though …

Anyway to answer your Q in a little more detail.
1 - I moved the mailserver to a managed hosted domain and at the same time migrated the public DNS to the same company. I created an A-record on the new public DNS and have verified that it is being seen with a dig.

I did change the entry to skip the certbot records, but undid that one change - but I also am running the server as a VM so tried recovering a prior backup which hadn’t been changed - but that also exhibited the same problems.

I am thinking that this might be a port forwarding related issue - but port forwarding is using an alias (pfsense) which was working exactly as is currently configured. I am really not sure what to add.

I have come to the conclusion that the best thing to do is to export the calendar entries (already done) and do the same with the emails I want to keep (in the process of doing that) and then abandon this install and do a fresh one for internal use only. I would still need to work out how to enable using a cert obtained from a different source, but hopefully that will be easier in a new install.

[unknown]
Yes, logs would be useful - not too sure what would be suitable though …

[unknown]

Not quite sure what happened, but the reply was attacted to the wrong comment - twice and I can’t see where to edit it.

So sorry to everyone for the duplications …
[unknown]
Yes, logs would be useful - not too sure what would be suitable though …

[unknown]
I did reply - but it ended up pointed at a different comment (twice for some reason) - sorry. It also won’t allow me to edit it. I wonder if it is a firefox related glitch.