Still no joy. I tried installing netcat inside the docker container and stopping nginx, but apart from suppressing the “install netcat” warning it didn’t help:
I’m changing the server name to “DAOU” so that I don’t trip the too-many-links warning.
(root prompt) /shared/letsencrypt/acme.sh --cron --home /shared/letsencrypt/
[Wed Jul 12 10:31:02 UTC 2017] ===Starting cron===
[Wed Jul 12 10:31:02 UTC 2017] Installing from online archive.
[Wed Jul 12 10:31:02 UTC 2017] Downloading https://github.com/Neilpang/acme.sh/archive/master.tar.gz
[Wed Jul 12 10:31:04 UTC 2017] Extracting master.tar.gz
[Wed Jul 12 10:31:04 UTC 2017] Installing to /shared/letsencrypt/
[Wed Jul 12 10:31:04 UTC 2017] Installed to /shared/letsencrypt//acme.sh
[Wed Jul 12 10:31:04 UTC 2017] Installing alias to '/root/.profile'
[Wed Jul 12 10:31:04 UTC 2017] OK, Close and reopen your terminal to start using acme.sh
[Wed Jul 12 10:31:04 UTC 2017] Good, bash is found, so change the shebang to use bash as preferred.
[Wed Jul 12 10:31:04 UTC 2017] OK
[Wed Jul 12 10:31:04 UTC 2017] Install success!
[Wed Jul 12 10:31:04 UTC 2017] Upgrade success!
[Wed Jul 12 10:31:04 UTC 2017] Auto upgraded to: 2.7.3
[Wed Jul 12 10:31:04 UTC 2017] Renew: 'DAOU'
[Wed Jul 12 10:31:04 UTC 2017] Single domain='DAOU'
[Wed Jul 12 10:31:04 UTC 2017] Getting domain auth token for each domain
[Wed Jul 12 10:31:04 UTC 2017] Getting webroot for domain='DAOU'
[Wed Jul 12 10:31:04 UTC 2017] Getting new-authz for domain='DAOU'
[Wed Jul 12 10:31:06 UTC 2017] The new-authz request is ok.
[Wed Jul 12 10:31:06 UTC 2017] Verifying:DAOU
[Wed Jul 12 10:31:10 UTC 2017] Pending
[Wed Jul 12 10:31:15 UTC 2017] Pending
[Wed Jul 12 10:31:23 UTC 2017] DAOU:Verify error:Fetching hp://DAOU/.well-known/acme-challenge/t1L*: Timeout
[Wed Jul 12 10:31:23 UTC 2017] Please check log file for more details: /shared/letsencrypt/acme.sh.log
[Wed Jul 12 10:31:24 UTC 2017] Error renew DAOU.
[Wed Jul 12 10:31:24 UTC 2017] ===End cron===
Anyone have a clue? In a normal system I could try a different cert-renewal scheme, like the one I wrote that works on all my other servers, but here I’m stuck with acme unless I move completely outside the discourse ecosystem and run it manually.