# Installation not working!
**URL:** https://meta.discourse.org/t/installation-not-working/170356
**Category:** Self-hosting
**Created:** [November 17, 2020, 12:36pm UTC](https://meta.discourse.org/t/installation-not-working/170356 "2020-11-17T12:36:48Z")
**Posts on this page:** 17
**Page:** 1
### Author:  [@akapetzoglou1](https://meta.discourse.org/u/akapetzoglou1)
#### Post date: [November 17, 2020, 12:36pm UTC](https://meta.discourse.org/t/installation-not-working/170356/1 "2020-11-17T12:36:48Z")
I’m trying to make a fresh install with the 1-click app from digital ocean.
It’s the third time I created it from the beginning and I’m experiencing the same issue.
Checking the dns, I see my domain pointing to the droplet’s ip, but discourse is not showing on my domain.
I run discourse-doctor and it stucks/ hangs before showing the “domain is served/not served” info.
Was there an update that could have introduced this behavior ?
---
### Author:  [@merefield](https://meta.discourse.org/u/merefield)
#### Post date: [November 17, 2020, 12:38pm UTC](https://meta.discourse.org/t/installation-not-working/170356/2 "2020-11-17T12:38:14Z")
The one click install is not supported.
Please use the remarkably straightforward [official install](https://meta.discourse.org/t/142537?silent=true) process.
Then if you have any issues with that, you can post those here and get support.
---
### Author:  [@akapetzoglou1](https://meta.discourse.org/u/akapetzoglou1)
#### Post date: [November 17, 2020, 1:06pm UTC](https://meta.discourse.org/t/installation-not-working/170356/3 "2020-11-17T13:06:26Z")
@merefield Just created a new droplet and run the installation as described on the [official install](https://meta.discourse.org/t/142537?silent=true). I’m still experiencing the exact same issue.
`discourse-doctor` hangs
and nothing is being served on my domain.
This is fully fresh with the [official install](https://meta.discourse.org/t/142537?silent=true). Can’t figure out what might be happening here. Any clues ?
---
### Author:  [@akapetzoglou1](https://meta.discourse.org/u/akapetzoglou1)
#### Post date: [November 17, 2020, 1:39pm UTC](https://meta.discourse.org/t/installation-not-working/170356/4 "2020-11-17T13:39:33Z")
@merefield On the `./launcher logs app` I see:
`nginx: [emerg] cannot load certificate "/shared/ssl/mydomainname.de.cer": PEM_read_bio_X509_AUX() failed (SSL: error:0909006C:PEM routines:get_name:no start line:Expecting: TRUSTED CERTIFICATE)`
not sure what that means though
---
### Author:  [@akapetzoglou1](https://meta.discourse.org/u/akapetzoglou1)
#### Post date: [November 17, 2020, 1:55pm UTC](https://meta.discourse.org/t/installation-not-working/170356/5 "2020-11-17T13:55:52Z")
So I see it’s tryin to look at `/shared/ssl` but actually the ssl is at `shared/standalone/ssl`. How should I fix this ?
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [November 17, 2020, 5:29pm UTC](https://meta.discourse.org/t/installation-not-working/170356/6 "2020-11-17T17:29:52Z")
The problem is usually that you don’t have DNS configured correctly or that it has not propagated. If you share your URL someone could check.
I often use `https://dnschecker.org/#A/example.com` to check
But if you have tried a bunch of times then you likely have exhausted the number of times that letsencrypt will send you a certificate. My guess is that is your current problem. I’m about 90% certain. You can “cheat” by following [Set up Let’s Encrypt with multiple domains / redirects - #53](https://meta.discourse.org/t/setting-up-let-s-encrypt-with-multiple-domains/56685/53), but it’s a more complicated setup and you couldn’t accomplish the simple one. Your best bet is probably to wait a few days and try again.
> [@akapetzoglou1](#):
>
> So I see it’s tryin to look at `/shared/ssl` but actually the ssl is at `shared/standalone/ssl` . How should I fix this ?
Not the problem. `/shared/ssl` is the path inside the container. `shared/standalone/ssl` is the path outside of the container.
---
### Author:  [@akapetzoglou1](https://meta.discourse.org/u/akapetzoglou1)
#### Post date: [November 18, 2020, 12:08pm UTC](https://meta.discourse.org/t/installation-not-working/170356/7 "2020-11-18T12:08:27Z")
@pfaffman Yeah, sound legit! Still I can’t create it, but I can create on another domain. Since the dns lookup shows that I’m connected to the correct server and all, I assume the case is what you described. I’ll wait some more days and try it again.
Thanks 🤘
---
### Author:  [@akapetzoglou1](https://meta.discourse.org/u/akapetzoglou1)
#### Post date: [November 18, 2020, 2:07pm UTC](https://meta.discourse.org/t/installation-not-working/170356/8 "2020-11-18T14:07:04Z")
@pfaffman Can you help me _cheating_? I had a look on setting it up with multiple domains, but I am not sure what you meant. Do you mean using the `after_ssl` hook somehow ?
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [November 18, 2020, 4:46pm UTC](https://meta.discourse.org/t/installation-not-working/170356/9 "2020-11-18T16:46:12Z")
You’d just add any other domain. So if your forum is `forum.example.com` you’d add a dns record for `cheat.example.com` pointing to your server and add it as described there. Since it would be a different certificate request, it’d let you request it.
---
### Author:  [@akapetzoglou1](https://meta.discourse.org/u/akapetzoglou1)
#### Post date: [November 18, 2020, 6:39pm UTC](https://meta.discourse.org/t/installation-not-working/170356/10 "2020-11-18T18:39:54Z")
@pfaffman I’m using digital ocean. I added the _[cheat.example.com](http://cheat.example.com)_ as an A record, but it’s not accepted as a domain when setting up.
_**(WARNING: Port 443 of computer does not appear to be accessible)**_
Followed the instructions and rebuild, but still “_ **The site can’t be reached** _”. 🤔
For the rest of the conf, I just added
```plaintext
after_ssl:
- replace:
filename: "/etc/runit/1.d/letsencrypt"
from: /--keylength/
to: "-d cheat.example.com"
```
inside `hooks:` on my `app.yml` file.
---
### Author:  [@JimPas](https://meta.discourse.org/u/JimPas)
#### Post date: [November 18, 2020, 9:24pm UTC](https://meta.discourse.org/t/installation-not-working/170356/11 "2020-11-18T21:24:28Z")
> [@pfaffman](#):
>
> I’m about 90% certain. You can “cheat” by following [Setting up Let’s Encrypt with Multiple Domains](https://meta.discourse.org/t/setting-up-let-s-encrypt-with-multiple-domains/56685/53), but it’s a more complicated setup and you couldn’t accomplish the simple one.
Or he can add one domain or subdomain using this. An easy way to get around it when you’ve hit a rate limit. But to avoid hitting the rate limits, it’s always best to use the test environment `--dryrun`. (Note that LetEncrypt is in the process of possibly renaming `--dryrun` to something easier for non-English speakers to recognize such as `--test` or `--testrun`. Most likely that won’t be until some time in January 2021 or later. They’re working on a complete rewrite of their guides as well. 🙂
* * *
The recommended method for adding a new domain to an existing certificate is indeed to re-use the original command line, add the new domain with another `-d` flag, and add `--expand` to tell `certbot` not to create a new lineage (that would result in a new subdirectory in `/etc/letsencrypt/live` ).
> **[Extend certificate by one altname](https://community.letsencrypt.org/t/extend-certificate-by-one-altname/23355)**
>
> Is there something like this command? certbot extend -domain maindomain -new newaltname I created some certificate with certbot certonly -d maindomain -d somealtname -d someotheraltname and now want to get a certificate as if i would have...
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [November 18, 2020, 10:24pm UTC](https://meta.discourse.org/t/installation-not-working/170356/12 "2020-11-18T22:24:32Z")
> [@JimPas](#):
>
> it’s always best to use the test environment `--dryrun` .
The problem here is that you don’t know it’s a test until it’s too late. Also, it’s not clear even to me how to configure discourse to pull those certs in test mode.
> [@JimPas](#):
>
> Or he can add one domain or subdomain using this.
That’s what I was trying to communicate.
---
### Author:  [@JimPas](https://meta.discourse.org/u/JimPas)
#### Post date: [November 18, 2020, 10:45pm UTC](https://meta.discourse.org/t/installation-not-working/170356/13 "2020-11-18T22:45:20Z")
> [@pfaffman](#):
>
> The problem here is that you don’t know it’s a test until it’s too late. Also, it’s not clear even to me how to configure discourse to pull those certs in test mode.
That’s one reason why they (at Lets Encrypt) are rewriting their guides… to make them more clear. Once you’re set up up getting a test (fake) certificate using the test environment, then one can run Cerbot in production mode and get their CA. After that, Discourse can be installed and it should grab the new (expanded) CA.
> [@pfaffman](#):
>
> That’s what I was trying to communicate.
👍
---
### Author:  [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [November 18, 2020, 10:47pm UTC](https://meta.discourse.org/t/installation-not-working/170356/14 "2020-11-18T22:47:31Z")
> [@JimPas](#):
>
> That’s one reason why they (at Lets Encrypt) are rewriting their guides… to make them more clear.
It’s not that. It’s that figuring out how to add a stanza to an app.yml to add that switch–however obvious it may be–is about 3X (or maybe 10X) as hard as installing Discourse. You’d need to edit app.yml and add a complicated thing and have all the spaces just right? Just wait a week or choose a new name.
---
### Author:  [@akapetzoglou1](https://meta.discourse.org/u/akapetzoglou1)
#### Post date: [November 18, 2020, 10:52pm UTC](https://meta.discourse.org/t/installation-not-working/170356/15 "2020-11-18T22:52:03Z")
@pfaffman I chose a new name as I described. One issue was that the `cheat.example.com` should be a CNAME instead of A record.
It still doesn’t work though. I’ll give it some more time.
_ **EDIT** :_ For reference here is my `app.yml`:
```plaintext
templates:
- "templates/postgres.template.yml"
- "templates/redis.template.yml"
- "templates/web.template.yml"
- "templates/web.ratelimited.template.yml"
## Uncomment these two lines if you wish to add Lets Encrypt (https)
- "templates/web.ssl.template.yml"
- "templates/web.letsencrypt.ssl.template.yml"
expose:
- "80:80" # http
- "443:443" # https
params:
db_default_text_search_config: "pg_catalog.english"
## Set db_shared_buffers to a max of 25% of the total memory.
## will be set automatically by bootstrap based on detected RAM, or you can override
db_shared_buffers: "256MB"
## can improve sorting performance, but adds memory usage per-connection
#db_work_mem: "40MB"
## Which Git revision should this container use? (default: tests-passed)
#version: tests-passed
env:
LANG: en_US.UTF-8
# DISCOURSE_DEFAULT_LOCALE: en
# DISCOURSE_RELATIVE_URL_ROOT: /forum
## How many concurrent web requests are supported? Depends on memory and CPU cores.
## will be set automatically by bootstrap based on detected CPUs, or you can override
UNICORN_WORKERS: 4
## TODO: The domain name this Discourse instance will respond to
## Required. Discourse will not work with a bare IP number.
DISCOURSE_HOSTNAME: cheat.example.com
## Uncomment if you want the container to be started with the same
## hostname (-h option) as specified above (default "$hostname-$config")
#DOCKER_USE_HOSTNAME: true
## TODO: List of comma delimited emails that will be made admin and developer
## on initial signup example 'user1@example.com,user2@example.com'
DISCOURSE_DEVELOPER_EMAILS: 'emails@emails.com'
## TODO: The SMTP mail server used to validate new accounts and send notifications
# SMTP ADDRESS, username, and password are required
# WARNING the char '#' in SMTP password can cause problems!
DISCOURSE_SMTP_ADDRESS: smtpout.secureserver.net
DISCOURSE_SMTP_PORT: 587
DISCOURSE_SMTP_USER_NAME: some@email.com
DISCOURSE_SMTP_PASSWORD: "apassword"
#DISCOURSE_SMTP_ENABLE_START_TLS: true # (optional, default true)
## If you added the Lets Encrypt template, uncomment below to get a free SSL certificate
LETSENCRYPT_ACCOUNT_EMAIL: me@example.com
## The http or https CDN address for this Discourse instance (configured to pull)
## see https://meta.discourse.org/t/14857 for details
#DISCOURSE_CDN_URL: https://discourse-cdn.example.com
## The Docker container is stateless; all data is stored in /shared
volumes:
- volume:
host: /var/discourse/shared/standalone
guest: /shared
- volume:
host: /var/discourse/shared/standalone/log/var-log
guest: /var/log
## Plugins go here
## see https://meta.discourse.org/t/19157 for details
hooks:
after_code:
- exec:
cd: $home/plugins
cmd:
- git clone https://github.com/discourse/docker_manager.git
after_ssl:
- replace:
filename: "/etc/runit/1.d/letsencrypt"
from: /--keylength/
to: "-d cheat.example.com --expand"
```
---
### Author:  [@akapetzoglou1](https://meta.discourse.org/u/akapetzoglou1)
#### Post date: [December 2, 2020, 2:04pm UTC](https://meta.discourse.org/t/installation-not-working/170356/16 "2020-12-02T14:04:40Z")
In the end a week passed and I was able to use my domain again. Probably I had some mistake in the config for making it work with the sub-domain, cause I’m pretty sure after reading at LetsEncrypt as well that this is the solution.
Thanks again @pfaffman and @JimPas for the help and the informative answers!
---
### Author:  [@system](https://meta.discourse.org/u/system)
#### Post date: [January 1, 2021, 2:04pm UTC](https://meta.discourse.org/t/installation-not-working/170356/17 "2021-01-01T14:04:43Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.