Can't request certificate while installing chatmail

[anotherdoesnm]

• Server OS (Operating System) - preferably Debian 12: Debian 12
• On which OS you run cmdeploy: Debian 13 in proot-distro
• chatmail/relay version: git rev-parse HEAD c84ddf6

Expected behavior

What did you try to achieve?
Successful installation

Actual behavior

Error while requesting certs
What happened instead?

Steps to reproduce the problem:

1. scripts/cmdeploy init [domain]
2. scripts/cmdeploy run --ssh-host [ip]

Screenshots

Logs

--> Starting operation: Request certificate for: cm2.project26.cc, mta-sts.cm2.project26.cc, www.cm2.project26.cc
    [10.10.10.31] 20251213122926 [DEBUG] acmetool.storageops: Target(cm2.project26.cc,mta-sts.cm2.project26.cc,www.cm2.project26.cc;https://acme-v02.api.letsencrypt.org/directory;0): best certificate satisfying is <nil>, err=Target(cm2.project26.cc,mta-sts.cm2.project26.cc,www.cm2.project26.cc;https://acme-v02.api.letsencrypt.org/directory;0): no certificate satisfies this target
    [10.10.10.31] 20251213122926 [DEBUG] acmetool.storageops: Target(cm2.project26.cc,mta-sts.cm2.project26.cc,www.cm2.project26.cc;https://acme-v02.api.letsencrypt.org/directory;0): requesting certificate
    [10.10.10.31] 20251213122927 [DEBUG] fdb: enforce permissions: keys/cuxpmdbp7xuk5sziylaozcuahjzcygud3le54rofxapibqu5r5sq/privkey 0/0 0/0
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.storageops: Target(cm2.project26.cc,mta-sts.cm2.project26.cc,www.cm2.project26.cc;https://acme-v02.api.letsencrypt.org/directory;0): ordering certificate
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: acquire port "[::]:80" "kMAlGeXVzp0MC8_xpItgb3__d2F5Dg96DEbssEXWz8o"
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: failed to listen on [::]:80: listen tcp 0.0.0.0:80: bind: address already in use
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: acquire port ":80" "kMAlGeXVzp0MC8_xpItgb3__d2F5Dg96DEbssEXWz8o"
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: failed to listen on :80: listen tcp :80: bind: address already in use
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: acquire port "[::1]:4402" "kMAlGeXVzp0MC8_xpItgb3__d2F5Dg96DEbssEXWz8o"
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: listening on [::1]:4402
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: acquire port "127.0.0.1:4402" "kMAlGeXVzp0MC8_xpItgb3__d2F5Dg96DEbssEXWz8o"
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: listening on 127.0.0.1:4402
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: acquire port "[::1]:402" "kMAlGeXVzp0MC8_xpItgb3__d2F5Dg96DEbssEXWz8o"
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: listening on [::1]:402
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: acquire port "127.0.0.1:402" "kMAlGeXVzp0MC8_xpItgb3__d2F5Dg96DEbssEXWz8o"
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: listening on 127.0.0.1:402
    [10.10.10.31] 20251213122927 [DEBUG] acme.responder: writing 2 webroot challenge files
    [10.10.10.31] 20251213122927 [DEBUG] acme.responder: writing webroot file /var/www/html/.well-known/acme-challenge/kMAlGeXVzp0MC8_xpItgb3__d2F5Dg96DEbssEXWz8o
    [10.10.10.31] 20251213122927 [DEBUG] acme.responder: writing webroot file /var/run/acme/acme-challenge/kMAlGeXVzp0MC8_xpItgb3__d2F5Dg96DEbssEXWz8o
    [10.10.10.31] 20251213122927 [DEBUG] acme.hooks: calling hook script: /etc/acme/hooks/nginx
    [10.10.10.31] 20251213122927 [DEBUG] acme.responder: http-01 self test for "www.cm2.project26.cc"
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: acquire port "[::]:80" "Br9n9e5_1pqrbofU6sS6HeAKywZC454nCdUt1_ruMto"
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: failed to listen on [::]:80: listen tcp 0.0.0.0:80: bind: address already in use
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: acquire port ":80" "Br9n9e5_1pqrbofU6sS6HeAKywZC454nCdUt1_ruMto"
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: failed to listen on :80: listen tcp :80: bind: address already in use
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: acquire port "[::1]:402" "Br9n9e5_1pqrbofU6sS6HeAKywZC454nCdUt1_ruMto"
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: acquire port "127.0.0.1:402" "Br9n9e5_1pqrbofU6sS6HeAKywZC454nCdUt1_ruMto"
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: acquire port "[::1]:4402" "Br9n9e5_1pqrbofU6sS6HeAKywZC454nCdUt1_ruMto"
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: acquire port "127.0.0.1:4402" "Br9n9e5_1pqrbofU6sS6HeAKywZC454nCdUt1_ruMto"
    [10.10.10.31] 20251213122927 [DEBUG] acme.responder: writing 2 webroot challenge files
    [10.10.10.31] 20251213122927 [DEBUG] acme.responder: writing webroot file /var/www/html/.well-known/acme-challenge/Br9n9e5_1pqrbofU6sS6HeAKywZC454nCdUt1_ruMto
    [10.10.10.31] 20251213122927 [DEBUG] acme.responder: writing webroot file /var/run/acme/acme-challenge/Br9n9e5_1pqrbofU6sS6HeAKywZC454nCdUt1_ruMto
    [10.10.10.31] 20251213122927 [DEBUG] acme.hooks: calling hook script: /etc/acme/hooks/nginx
    [10.10.10.31] 20251213122927 [DEBUG] acme.responder: http-01 self test for "cm2.project26.cc"
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: acquire port "[::]:80" "R8vmwJGr83xpCx1Aexd6zHgi8SDUjDXZTNJcWgHn2vo"
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: failed to listen on [::]:80: listen tcp 0.0.0.0:80: bind: address already in use
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: acquire port ":80" "R8vmwJGr83xpCx1Aexd6zHgi8SDUjDXZTNJcWgHn2vo"
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: failed to listen on :80: listen tcp :80: bind: address already in use
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: acquire port "127.0.0.1:402" "R8vmwJGr83xpCx1Aexd6zHgi8SDUjDXZTNJcWgHn2vo"
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: acquire port "[::1]:4402" "R8vmwJGr83xpCx1Aexd6zHgi8SDUjDXZTNJcWgHn2vo"
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: acquire port "127.0.0.1:4402" "R8vmwJGr83xpCx1Aexd6zHgi8SDUjDXZTNJcWgHn2vo"
    [10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: acquire port "[::1]:402" "R8vmwJGr83xpCx1Aexd6zHgi8SDUjDXZTNJcWgHn2vo"
    [10.10.10.31] 20251213122927 [DEBUG] acme.responder: writing 2 webroot challenge files
    [10.10.10.31] 20251213122927 [DEBUG] acme.responder: writing webroot file /var/www/html/.well-known/acme-challenge/R8vmwJGr83xpCx1Aexd6zHgi8SDUjDXZTNJcWgHn2vo
    [10.10.10.31] 20251213122927 [DEBUG] acme.responder: writing webroot file /var/run/acme/acme-challenge/R8vmwJGr83xpCx1Aexd6zHgi8SDUjDXZTNJcWgHn2vo
    [10.10.10.31] 20251213122927 [DEBUG] acme.hooks: calling hook script: /etc/acme/hooks/nginx
    [10.10.10.31] 20251213122927 [DEBUG] acme.responder: http-01 self test for "mta-sts.cm2.project26.cc"
    [10.10.10.31] 20251213122932 [INFO] acme.responder: http-01 self test failed: www.cm2.project26.cc: Get "http://www.cm2.project26.cc/.well-known/acme-challenge/kMAlGeXVzp0MC8_xpItgb3__d2F5Dg96DEbssEXWz8o": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
    [10.10.10.31] 20251213122932 [DEBUG] acme.responder: removing webroot file /var/www/html/.well-known/acme-challenge/kMAlGeXVzp0MC8_xpItgb3__d2F5Dg96DEbssEXWz8o
    [10.10.10.31] 20251213122932 [DEBUG] acme.responder: removing webroot file /var/run/acme/acme-challenge/kMAlGeXVzp0MC8_xpItgb3__d2F5Dg96DEbssEXWz8o
    [10.10.10.31] 20251213122932 [DEBUG] acme.hooks: calling hook script: /etc/acme/hooks/nginx
    [10.10.10.31] 20251213122932 [DEBUG] acmetool.solver: challenge start failed: Get "http://www.cm2.project26.cc/.well-known/acme-challenge/kMAlGeXVzp0MC8_xpItgb3__d2F5Dg96DEbssEXWz8o": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
    [10.10.10.31] 20251213122932 [INFO] acme.responder: http-01 self test failed: cm2.project26.cc: Get "http://cm2.project26.cc/.well-known/acme-challenge/Br9n9e5_1pqrbofU6sS6HeAKywZC454nCdUt1_ruMto": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
    [10.10.10.31] 20251213122932 [DEBUG] acme.responder: removing webroot file /var/www/html/.well-known/acme-challenge/Br9n9e5_1pqrbofU6sS6HeAKywZC454nCdUt1_ruMto
    [10.10.10.31] 20251213122932 [DEBUG] acme.responder: removing webroot file /var/run/acme/acme-challenge/Br9n9e5_1pqrbofU6sS6HeAKywZC454nCdUt1_ruMto
    [10.10.10.31] 20251213122932 [DEBUG] acme.hooks: calling hook script: /etc/acme/hooks/nginx
    [10.10.10.31] 20251213122932 [DEBUG] acmetool.solver: challenge start failed: Get "http://cm2.project26.cc/.well-known/acme-challenge/Br9n9e5_1pqrbofU6sS6HeAKywZC454nCdUt1_ruMto": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
    [10.10.10.31] 20251213122932 [INFO] acme.responder: http-01 self test failed: mta-sts.cm2.project26.cc: Get "http://mta-sts.cm2.project26.cc/.well-known/acme-challenge/R8vmwJGr83xpCx1Aexd6zHgi8SDUjDXZTNJcWgHn2vo": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
    [10.10.10.31] 20251213122932 [DEBUG] acme.responder: removing webroot file /var/www/html/.well-known/acme-challenge/R8vmwJGr83xpCx1Aexd6zHgi8SDUjDXZTNJcWgHn2vo
    [10.10.10.31] 20251213122932 [DEBUG] acme.responder: removing webroot file /var/run/acme/acme-challenge/R8vmwJGr83xpCx1Aexd6zHgi8SDUjDXZTNJcWgHn2vo
    [10.10.10.31] 20251213122932 [DEBUG] acme.hooks: calling hook script: /etc/acme/hooks/nginx
    [10.10.10.31] 20251213122932 [DEBUG] acmetool.solver: challenge start failed: Get "http://mta-sts.cm2.project26.cc/.well-known/acme-challenge/R8vmwJGr83xpCx1Aexd6zHgi8SDUjDXZTNJcWgHn2vo": context deadline exceeded (Client.Timeout exceeded while awaiting headers)
    [10.10.10.31] 20251213122932 [DEBUG] acme.hooks: calling hook script: /etc/acme/hooks/nginx
    [10.10.10.31] 20251213122932 [DEBUG] acmetool.solver: challenge start failed: could not install DNS challenge, no hooks succeeded
    [10.10.10.31] 20251213122933 [DEBUG] acme.hooks: calling hook script: /etc/acme/hooks/nginx
    [10.10.10.31] 20251213122933 [DEBUG] acmetool.solver: challenge start failed: could not install DNS challenge, no hooks succeeded
    [10.10.10.31] 20251213122933 [DEBUG] acme.hooks: calling hook script: /etc/acme/hooks/nginx
    [10.10.10.31] 20251213122933 [DEBUG] acmetool.solver: challenge start failed: could not install DNS challenge, no hooks succeeded
    [10.10.10.31] 20251213122933 [DEBUG] acmetool.solver: challenge instantiation failed: challenge type not supported
    [10.10.10.31] 20251213122933 [DEBUG] acmetool.solver: challenge instantiation failed: challenge type not supported
    [10.10.10.31] 20251213122933 [DEBUG] acmetool.solver: challenge instantiation failed: challenge type not supported
    [10.10.10.31] 20251213122933 [ERROR] acmetool.storageops: Target(cm2.project26.cc,mta-sts.cm2.project26.cc,www.cm2.project26.cc;https://acme-v02.api.letsencrypt.org/directory;0): failed to request certificate: the following errors occurred:
    [10.10.10.31] exhausted all possible challenges in authorization "https://acme-v02.api.letsencrypt.org/acme/authz/2874924576/626819290196" [due to inner error: the following errors occurred:
    [10.10.10.31] Get "http://www.cm2.project26.cc/.well-known/acme-challenge/kMAlGeXVzp0MC8_xpItgb3__d2F5Dg96DEbssEXWz8o": context deadline exceeded (Client.Timeout exceeded while awaiting headers);
    [10.10.10.31] could not install DNS challenge, no hooks succeeded;
    [10.10.10.31] challenge type not supported];
    [10.10.10.31] exhausted all possible challenges in authorization "https://acme-v02.api.letsencrypt.org/acme/authz/2874924576/626819289996" [due to inner error: the following errors occurred:
    [10.10.10.31] Get "http://cm2.project26.cc/.well-known/acme-challenge/Br9n9e5_1pqrbofU6sS6HeAKywZC454nCdUt1_ruMto": context deadline exceeded (Client.Timeout exceeded while awaiting headers);
    [10.10.10.31] could not install DNS challenge, no hooks succeeded;
    [10.10.10.31] challenge type not supported];
    [10.10.10.31] exhausted all possible challenges in authorization "https://acme-v02.api.letsencrypt.org/acme/authz/2874924576/626819290096" [due to inner error: the following errors occurred:
    [10.10.10.31] Get "http://mta-sts.cm2.project26.cc/.well-known/acme-challenge/R8vmwJGr83xpCx1Aexd6zHgi8SDUjDXZTNJcWgHn2vo": context deadline exceeded (Client.Timeout exceeded while awaiting headers);
    [10.10.10.31] could not install DNS challenge, no hooks succeeded;
    [10.10.10.31] challenge type not supported]
    [10.10.10.31] 20251213122933 [DEBUG] acmetool.storageops: done processing targets, reconciliation complete, 1 errors occurred
    [10.10.10.31] 20251213122933 [ERROR] acmetool.storageops: error while processing targets: the following errors occurred:
    [10.10.10.31] error satisfying Target(cm2.project26.cc,mta-sts.cm2.project26.cc,www.cm2.project26.cc;https://acme-v02.api.letsencrypt.org/directory;0): the following errors occurred:
    [10.10.10.31] exhausted all possible challenges in authorization "https://acme-v02.api.letsencrypt.org/acme/authz/2874924576/626819290196" [due to inner error: the following errors occurred:
    [10.10.10.31] Get "http://www.cm2.project26.cc/.well-known/acme-challenge/kMAlGeXVzp0MC8_xpItgb3__d2F5Dg96DEbssEXWz8o": context deadline exceeded (Client.Timeout exceeded while awaiting headers);
    [10.10.10.31] could not install DNS challenge, no hooks succeeded;
    [10.10.10.31] challenge type not supported];
    [10.10.10.31] exhausted all possible challenges in authorization "https://acme-v02.api.letsencrypt.org/acme/authz/2874924576/626819289996" [due to inner error: the following errors occurred:
    [10.10.10.31] Get "http://cm2.project26.cc/.well-known/acme-challenge/Br9n9e5_1pqrbofU6sS6HeAKywZC454nCdUt1_ruMto": context deadline exceeded (Client.Timeout exceeded while awaiting headers);
    [10.10.10.31] could not install DNS challenge, no hooks succeeded;
    [10.10.10.31] challenge type not supported];
    [10.10.10.31] exhausted all possible challenges in authorization "https://acme-v02.api.letsencrypt.org/acme/authz/2874924576/626819290096" [due to inner error: the following errors occurred:
    [10.10.10.31] Get "http://mta-sts.cm2.project26.cc/.well-known/acme-challenge/R8vmwJGr83xpCx1Aexd6zHgi8SDUjDXZTNJcWgHn2vo": context deadline exceeded (Client.Timeout exceeded while awaiting headers);
    [10.10.10.31] could not install DNS challenge, no hooks succeeded;
    [10.10.10.31] challenge type not supported]
    [10.10.10.31] 20251213122933 [ERROR] acmetool.storageops: failed to reconcile: the following errors occurred:
    [10.10.10.31] error satisfying Target(cm2.project26.cc,mta-sts.cm2.project26.cc,www.cm2.project26.cc;https://acme-v02.api.letsencrypt.org/directory;0): the following errors occurred:
    [10.10.10.31] exhausted all possible challenges in authorization "https://acme-v02.api.letsencrypt.org/acme/authz/2874924576/626819290196" [due to inner error: the following errors occurred:
    [10.10.10.31] Get "http://www.cm2.project26.cc/.well-known/acme-challenge/kMAlGeXVzp0MC8_xpItgb3__d2F5Dg96DEbssEXWz8o": context deadline exceeded (Client.Timeout exceeded while awaiting headers);
    [10.10.10.31] could not install DNS challenge, no hooks succeeded;
    [10.10.10.31] challenge type not supported];
    [10.10.10.31] exhausted all possible challenges in authorization "https://acme-v02.api.letsencrypt.org/acme/authz/2874924576/626819289996" [due to inner error: the following errors occurred:
    [10.10.10.31] Get "http://cm2.project26.cc/.well-known/acme-challenge/Br9n9e5_1pqrbofU6sS6HeAKywZC454nCdUt1_ruMto": context deadline exceeded (Client.Timeout exceeded while awaiting headers);
    [10.10.10.31] could not install DNS challenge, no hooks succeeded;
    [10.10.10.31] challenge type not supported];
    [10.10.10.31] exhausted all possible challenges in authorization "https://acme-v02.api.letsencrypt.org/acme/authz/2874924576/626819290096" [due to inner error: the following errors occurred:
    [10.10.10.31] Get "http://mta-sts.cm2.project26.cc/.well-known/acme-challenge/R8vmwJGr83xpCx1Aexd6zHgi8SDUjDXZTNJcWgHn2vo": context deadline exceeded (Client.Timeout exceeded while awaiting headers);
    [10.10.10.31] could not install DNS challenge, no hooks succeeded;
    [10.10.10.31] challenge type not supported]
    [10.10.10.31] 20251213122933 [DEBUG] acmetool.storageops: disjoint hostname mapping: "www.cm2.project26.cc" -> Target(cm2.project26.cc,mta-sts.cm2.project26.cc,www.cm2.project26.cc;https://acme-v02.api.letsencrypt.org/directory;0)
    [10.10.10.31] 20251213122933 [DEBUG] acmetool.storageops: disjoint hostname mapping: "cm2.project26.cc" -> Target(cm2.project26.cc,mta-sts.cm2.project26.cc,www.cm2.project26.cc;https://acme-v02.api.letsencrypt.org/directory;0)
    [10.10.10.31] 20251213122933 [DEBUG] acmetool.storageops: disjoint hostname mapping: "mta-sts.cm2.project26.cc" -> Target(cm2.project26.cc,mta-sts.cm2.project26.cc,www.cm2.project26.cc;https://acme-v02.api.letsencrypt.org/directory;0)
    [10.10.10.31] 20251213122933 [DEBUG] acmetool.storageops: could not find certificate satisfying Target(cm2.project26.cc,mta-sts.cm2.project26.cc,www.cm2.project26.cc;https://acme-v02.api.letsencrypt.org/directory;0): Target(cm2.project26.cc,mta-sts.cm2.project26.cc,www.cm2.project26.cc;https://acme-v02.api.letsencrypt.org/directory;0): no certificate satisfies this target
    [10.10.10.31] 20251213122933 [DEBUG] acmetool.storageops: could not find certificate satisfying Target(cm2.project26.cc,mta-sts.cm2.project26.cc,www.cm2.project26.cc;https://acme-v02.api.letsencrypt.org/directory;0): Target(cm2.project26.cc,mta-sts.cm2.project26.cc,www.cm2.project26.cc;https://acme-v02.api.letsencrypt.org/directory;0): no certificate satisfies this target
    [10.10.10.31] 20251213122933 [DEBUG] acmetool.storageops: could not find certificate satisfying Target(cm2.project26.cc,mta-sts.cm2.project26.cc,www.cm2.project26.cc;https://acme-v02.api.letsencrypt.org/directory;0): Target(cm2.project26.cc,mta-sts.cm2.project26.cc,www.cm2.project26.cc;https://acme-v02.api.letsencrypt.org/directory;0): no certificate satisfies this target
    [10.10.10.31] 20251213122933 [CRITICAL] acmetool: fatal: reconcile: the following errors occurred:
    [10.10.10.31] error satisfying Target(cm2.project26.cc,mta-sts.cm2.project26.cc,www.cm2.project26.cc;https://acme-v02.api.letsencrypt.org/directory;0): the following errors occurred:
    [10.10.10.31] exhausted all possible challenges in authorization "https://acme-v02.api.letsencrypt.org/acme/authz/2874924576/626819290196" [due to inner error: the following errors occurred:
    [10.10.10.31] Get "http://www.cm2.project26.cc/.well-known/acme-challenge/kMAlGeXVzp0MC8_xpItgb3__d2F5Dg96DEbssEXWz8o": context deadline exceeded (Client.Timeout exceeded while awaiting headers);
    [10.10.10.31] could not install DNS challenge, no hooks succeeded;
    [10.10.10.31] challenge type not supported];
    [10.10.10.31] exhausted all possible challenges in authorization "https://acme-v02.api.letsencrypt.org/acme/authz/2874924576/626819289996" [due to inner error: the following errors occurred:
    [10.10.10.31] Get "http://cm2.project26.cc/.well-known/acme-challenge/Br9n9e5_1pqrbofU6sS6HeAKywZC454nCdUt1_ruMto": context deadline exceeded (Client.Timeout exceeded while awaiting headers);
    [10.10.10.31] could not install DNS challenge, no hooks succeeded;
    [10.10.10.31] challenge type not supported];
    [10.10.10.31] exhausted all possible challenges in authorization "https://acme-v02.api.letsencrypt.org/acme/authz/2874924576/626819290096" [due to inner error: the following errors occurred:
    [10.10.10.31] Get "http://mta-sts.cm2.project26.cc/.well-known/acme-challenge/R8vmwJGr83xpCx1Aexd6zHgi8SDUjDXZTNJcWgHn2vo": context deadline exceeded (Client.Timeout exceeded while awaiting headers);
    [10.10.10.31] could not install DNS challenge, no hooks succeeded;
    [10.10.10.31] challenge type not supported]
    [10.10.10.31] Error: executed 0 commands

--> Disconnecting from hosts...
--> pyinfra error: No hosts remaining!
Deploy failed

[josephbu]

From your log snippet, failure to get an SSL certificate is because acmetool was unable to use port 80.

I would find whatever is using port 80 on your chatmail server and disable or remove it.

[10.10.10.31] 20251213122927 [DEBUG] acmetool.storageops: Target(cm2.project26.cc,mta-sts.cm2.project26.cc,www.cm2.project26.cc;https://acme-v02.api.letsencrypt.org/directory;0): ordering certificate
[10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: acquire port "[::]:80" "kMAlGeXVzp0MC8_xpItgb3__d2F5Dg96DEbssEXWz8o"
[10.10.10.31] 20251213122927 [DEBUG] acmetool.reshttp: failed to listen on [::]:80: listen tcp 0.0.0.0:80: bind: address already in use

[anotherdoesnm]

This was vm without anything (from scratch) so 80 port may be allocated only by nginx which was installed by cmdeploy

[josephbu]

Maybe some race condition? For reference, here is output from my running chatmail relay.

# netstat -lpn | grep acme
tcp6       0      0 :::80                   :::*                    LISTEN      31302/acmetool: run 

# netstat -lpn | grep nginx
tcp        0      0 127.0.0.1:8443          0.0.0.0:*               LISTEN      2598532/nginx: mast 
tcp        0      0 0.0.0.0:443             0.0.0.0:*               LISTEN      2598532/nginx: mast 
tcp6       0      0 :::443                  :::*                    LISTEN      2598532/nginx: mast 

[anotherdoesnm]

well i have such output

root@chaml:~# netstat -lpn | grep acme
tcp6       0      0 :::80                   :::*                    LISTEN      14632/acmetool: run
root@chaml:~# netstat -lpn | grep nginx
root@chaml:~#

[vincenry]

I have exactly the same issue while trying to run chatmail inside an unprivileged LXC container (debian 12 or 13) under proxmox (8.4). The ports are correctly opened and accessible from wan.

It run fines if installed directly on proxmox.

[anotherdoesnm]

Yeah i'm tried to install on Proxmox LXC container too (sorry didn't said it before)

[anotherdoesnm]

catched the same error at kvm machine, @vincenry did kvm work for you?

[ccclxxiii]

@anotherdoesnm it sounds like you are setting up a tunneled configuration via debian13 lxc container on proxmox. at this time we do not provide active support for it. if you are able to document working steps, we can consider reviewing, duplicating, and possibly adding it to relay documentation.

[anotherdoesnm]

what did you mean by "tunneled"? It's a server with reachable ip and pfSense as firewall/gateway

[anotherdoesnm]

This issue is not quite actual to me because i changed cmdeploy to maddy_chatmail but i would like to help solving this issue so others can run cmdeploy on their proxmox servers

[ccclxxiii]

what did you mean by "tunneled"? It's a server with reachable ip and pfSense as firewall/gateway

wasn't certain if you were tunneling or if it was direct.

This issue is not quite actual to me because i changed cmdeploy to maddy_chatmail but i would like to help solving this issue so others can run cmdeploy on their proxmox servers

if you're able to make it work on proxmox lxc please carefully document the steps in a gist or this issue perhaps. normal proxmox vm works as expected but of course vms will behave different on the platform vs lxc.

[anotherdoesnm]

normal proxmox vm works as expected

huh, it got failed on vm for me too

[vincenry]

catched the same error at kvm machine, @vincenry did kvm work for you?

Sorry for the delay. I didn't try recently, but it worked for me in a proxmox VM a few months ago.