Lets Encrypt validation failed for these domain(s)

[dnutan (Marc)]

Is your web-server an internal server (maybe it is behind an nginx reverse proxy)?

Some options:

@giacomo

I’ve been working a little bit on adding the dns challenge instead of the http one.

Pros:

• you can request a certificate from a machine without a valid DNS and without a public accessible HTTP port (very usefull for development scenarios!)
• you can request a wildcard certificate

Cons:

• your DNS provider must be supported by certbot (CloudFlare and DigitalOcean are supported and have a free plan)
• your DNS NS records must point to the DNS provider

https://docs.nethserver.org/projects/nethserver-devel/en/latest/certificate_management.html#dns-challenge

or one of these guides depending on DNS provider:

https://wiki.nethserver.org/doku.php?id=userguide:let_s_encrypt_for_internal_servers
https://wiki.nethserver.org/doku.php?id=userguide:let_s_encrypt_acme-dns