Domains configurations - what am I doing wrong? #7224

blazpie · 2024-09-30T21:45:23Z

blazpie
Sep 30, 2024

That's not my first dokku deployment, but first for a quite long time, so maybe I missed some changes.

I've got one app deployed, working correctly, when domains are disabled I can get there without issues using HTTP://IP:port addressing. When I'm trying to add domain to my app I'm constantly receiving ERR_CONNECTION_REFUSED.

Domain is configured with A record, checked :

➜  ~ host slow.dzik.app
slow.dzik.app has address 167.235.204.158

Domains are for now configured without global, I've been doing that before and it has been working nicely:

root@slownik-staging:~# dokku domains:report
=====> slow domains information
       Domains app enabled:           true
       Domains app vhosts:            slow.dzik.app
       Domains global enabled:        false
       Domains global vhosts:

nginx config also seams to be fine:

root@slownik-staging:~# dokku nginx:show-config slow

server {
  listen      [::]:80;
  listen      80;
  server_name slow.dzik.app;
  access_log  /var/log/nginx/slow-access.log;
  error_log   /var/log/nginx/slow-error.log;
  underscores_in_headers off;

  location    / {

    gzip on;
    gzip_min_length  1100;
    gzip_buffers  4 32k;
    gzip_types    text/css text/javascript text/xml text/plain text/x-component application/javascript application/x-javascript application/wasm application/json application/xml application/rss+xml font/truetype application/x-font-ttf font/opentype application/vnd.ms-fontobject image/svg+xml;
    gzip_vary on;
    gzip_comp_level  6;

    proxy_pass  http://slow-5000;
    proxy_http_version 1.1;
    proxy_read_timeout 60s;
    proxy_buffer_size 4k;
    proxy_buffering on;
    proxy_buffers 8 4k;
    proxy_busy_buffers_size 8k;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection $http_connection;
    proxy_set_header Host $http_host;
    proxy_set_header X-Forwarded-For $remote_addr;
    proxy_set_header X-Forwarded-Port $server_port;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-Request-Start $msec;

  }

  client_max_body_size 1m;

  error_page 400 401 402 403 405 406 407 408 409 410 411 412 413 414 415 416 417 418 420 422 423 424 426 428 429 431 444 449 450 451 /400-error.html;
  location /400-error.html {
    root /var/lib/dokku/data/nginx-vhosts/dokku-errors;
    internal;
  }

  error_page 404 /404-error.html;
  location /404-error.html {
    root /var/lib/dokku/data/nginx-vhosts/dokku-errors;
    internal;
  }

  error_page 500 501 502 503 504 505 506 507 508 509 510 511 /500-error.html;
  location /500-error.html {
    root /var/lib/dokku/data/nginx-vhosts/dokku-errors;
    internal;
  }
  include /home/dokku/slow/nginx.conf.d/*.conf;

}

upstream slow-5000 {

  server 172.17.0.2:5000;
}

Honestly, I've got no idea what could be wrong here. After spending a day trying to fix it I'm about to build nginx-proxy manually on top of dokku but before I start, maybe someone can point the reason of my trouble?

josegonzalez · 2024-10-01T08:38:08Z

josegonzalez
Oct 1, 2024
Maintainer

Seems like maybe dzik.app has HSTS enabled or something. If I attempt to hit that domain via curl, here is what I get:

% curl --include -L "http://slow.dzik.app/"
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 01 Oct 2024 08:36:45 GMT
Content-Type: text/html
Content-Length: 94
Connection: keep-alive
Location: http://slow.dzik.app/lexemes
Cache-Control: no-cache
X-Request-Id: ad5f37ff-9561-4b97-83d1-a253fe051bfb
X-Runtime: 0.000639

HTTP/1.1 302 Found
Server: nginx
Date: Tue, 01 Oct 2024 08:36:45 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://slow.dzik.app/users/sign_in
Cache-Control: no-cache
Set-Cookie: _staropolskislownik2_session=Ez8fVofxSRm5aDGtzYereD6wv2Bucll3tw5HMEavOd%2Fxdy%2BPkizVPNfFHJAMQK%2BDM%2FZLW4qPEOscraHMi1qehfdyxsYqvoMs5K3Ac9PtpS3ZkUrgDJL9AxeAgk%2FlIpW6qG5PMJrurf1TuzRXi8Xn3u4NuyqQIu9b3dNciv%2FchHDKN74sxg2uhQ0ipg53t%2BH52ebRpnEDwGUJg1XudJHesxBiJ4ADw2qRMw%3D%3D--8PPu8D25b1IfMoIK--Rkrp%2BSc2HIuXQTlx8XQQOA%3D%3D; path=/; HttpOnly
X-Request-Id: 76fd9a2b-d0ce-4066-81a3-53838db06b63
X-Runtime: 0.004481

HTTP/1.1 200 OK
Server: nginx
Date: Tue, 01 Oct 2024 08:36:45 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Permitted-Cross-Domain-Policies: none
Referrer-Policy: strict-origin-when-cross-origin
ETag: W/"23e07f9e53d89d15758a6141d4fed672"
Cache-Control: max-age=0, private, must-revalidate
Set-Cookie: _staropolskislownik2_session=GPm3SyBYElHdMR9NKmNg0NxIZcZbsYgnRY9FIYv0j3rupsN26sk3xFk8VL3gPFyQZbz4DqE15patjeGWReyv4HwIwbGDBuGq5P50U7a9yIRxjP%2FlUnPyu1WO6ipAp5B6TbfYzCX%2B6WVAGMPsWVo%3D--sdqEuZ1S%2Fp5UqUI5--XCdwz5mfWqO%2BkP%2FDPZoXQg%3D%3D; path=/; HttpOnly
X-Request-Id: 2500402c-bea0-4b3b-9f52-561af32eb776
X-Runtime: 0.353681

<!DOCTYPE html>
<html>
<head>
<meta content='text/html; charset=UTF-8' http-equiv='Content-Type'>
<title>Słownik Prasłowiański PAN</title>
<meta name="csrf-param" content="authenticity_token" />
<meta name="csrf-token" content="aOKnEROzuzdolJyhdSq8dj2vaiW4WoEgD733uKIfZ0Onj4mKLBIoSHR2amo5WwIqldWndKnaRY6iHywun14DXg==" />

<link rel="stylesheet" media="all" href="/assets/application-2dd32d83c28e85e72e2450bbb427eafa7f5a0c22f84c0d3cb113b9bd051975d9.css" />
<script src="/assets/application-e000266a6db2cd2e1842b96bccd027cbe8e45cec688fd72c83daf87e8c9d66d0.js"></script>
</head>
<body class='bg-light'>
<div class='container-fluid d-flex justify-content-center align-items-center'>
<div class='col-5 mt-4 card card-body bg-white'>
<h1 class='text-center'>Słownik Prasłowiański PAN</h1>
<h3 class='text-center mb-4'>Zaloguj się</h3>

<form class="new_user" id="new_user" action="/users/sign_in" accept-charset="UTF-8" method="post"><input name="utf8" type="hidden" value="&#x2713;" /><input type="hidden" name="authenticity_token" value="fNnUTPlpHa7kaZtIuLktb0Dyj5g7Uelexzi9rrjbl/s/QK2v2Yf+SyJFODFSWeiOUWGSzXenrs0Ktx/+QtmroA==" />
<div class='form-group row'>
  <label class="col-sm-4 col-form-label" for="user_email">Adres e-mail</label>
  <div class="col-sm-8">
    <input autofocus="autofocus" autocomplete="email" class="form-control" type="email" value="" name="user[email]" id="user_email" />
  </div>
</div>
<div class="form-group row">
  <label class="col-sm-4 col-form-label" for="user_password">Hasło</label><br />
  <div class="col-sm-8">
    <input autocomplete="current-password" class="form-control" type="password" name="user[password]" id="user_password" />
  </div>
</div>

<div class="form-group row">
  <div class="col-sm-10 offset-sm-4">
    <div class="form-check">
      <input name="user[remember_me]" type="hidden" value="0" /><input class="form-check-input" type="checkbox" value="1" name="user[remember_me]" id="user_remember_me" />
      <label class="form-check-label" for="user_remember_me">Zapamiętaj mnie</label>
    </div>
  </div>
</div>

<div class="form-group row">
  <div class="col-sm-10 offset-sm-4">
    <input type="submit" name="commit" value="Zaloguj się" class="btn btn-outline-secondary" data-disable-with="Zaloguj się" />
  </div>
</div>
</form><div class="col-sm-10 offset-sm-4">


<a href="/users/password/new">Zapomniałeś hasła?</a><br />




</div>
</div>
</div>
</body>
</html>

Since that works, my guess is that it is not related to Dokku but the domain.

0 replies

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Domains configurations - what am I doing wrong? #7224

{{title}}

Replies: 1 comment

{{title}}

Select a reply

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

Domains configurations - what am I doing wrong? #7224

blazpie Sep 30, 2024

Replies: 1 comment

josegonzalez Oct 1, 2024 Maintainer

Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

blazpie
Sep 30, 2024

josegonzalez
Oct 1, 2024
Maintainer