Wednesday, January 08, 2025
support@conference.yunohost.org
January
Mon Tue Wed Thu Fri Sat Sun
    1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
   
             

[06:46:42] <Marc_> Hello, I have "connection failed" issues on my webserver
[06:47:23] <Marc_> It started when I changed the Baikal settings to try to enable LDAP auth
[06:48:49] <Marc_> Restarting nginx doesn't solve the problem, it is labelled as running but there is this message:
[06:49:42] <Marc_> ```Jan 08 07:25:09 domain.tld systemd[1]: Starting nginx.service - A high performance web server and a reverse proxy server...
Jan 08 07:25:09 domain.tld nginx[2746]: 2025/01/08 07:25:09 [info] 2746#2746: Using 116KiB of shared memory for nchan in /etc/nginx/nginx.conf:61
Jan 08 07:25:09 domain.tld nginx[2746]: 2025/01/08 07:25:09 [info] 2746#2746: Using 131072KiB of shared memory for nchan in /etc/nginx/nginx.conf:61
Jan 08 07:25:09 domain.tld nginx[2746]: 2025/01/08 07:25:09 [warn] 2746#2746: could not build optimal variables_hash, you should increase either variables_hash_max_size: 1024 or variables_hash_bucket_siz>
Jan 08 07:25:09 domain.tld nginx[2748]: 2025/01/08 07:25:09 [warn] 2748#2748: could not build optimal variables_hash, you should increase either variables_hash_max_size: 1024 or variables_hash_bucket_siz>
Jan 08 07:25:09 domain.tld systemd[1]: Started nginx.service - A high performance web server and a reverse proxy server.
```

[07:48:34] <Marc_> Sometimes nginx comes back, then I try to fix my baikal issues and after some clicks nginx shuts down again
[08:15:47] <jonathan> It is just warnings, so it should not crash because of it.
Do you have logs from the time when nginx actually shuts down?

What is the outout of "nginx -t"?

[08:33:14] <Marc_> nginx just crashed again, but the command returns:
`# nginx -t`
```
2025/01/08 09:32:25 [info] 4759#4759: Using 116KiB of shared memory for nchan in /etc/nginx/nginx.conf:61
2025/01/08 09:32:25 [info] 4759#4759: Using 131072KiB of shared memory for nchan in /etc/nginx/nginx.conf:61
2025/01/08 09:32:25 [warn] 4759#4759: could not build optimal variables_hash, you should increase either variables_hash_max_size: 1024 or variables_hash_bucket_size: 64; ignoring variables_hash_bucket_size
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
```
[08:35:00] <Marc_> I think I should uninstall and reinstall baikal
[08:53:02] <Marc_> I uninstalled baikal and nginx seems to be much better
[09:06:56] <Marc_> But issues came back after reinstalling baikal and trying to reconfigure it...
[09:07:23] <Marc_> I should have left it as it was, it worked very well so far
[09:19:10] <niklas> hey all, can I restore a ynh 11 backup into ynh 12?
[09:38:59] <orhtej2> > <@niklas:freiburg.social> hey all, can I restore a ynh 11 backup into ynh 12?

you should be able to do so, yes
[09:47:05] <Marc_> Oh I understand now that I was banned by fail2ban !
[10:00:44] <isAAAc> https://doc.yunohost.org/en/fail2ban#whitelist-an-ip-address ;)
[10:02:00] <danceswithcats> I've got a major problem with my server but I can't post the logs because the yunopaste button prompts another error. The main update error says 500 Action: "PUT" /Yunohost/api/update/all

I'm going to paste the full error list from the popup as it's all I've got. Sorry to bombard you.

Fetching available upgrades for system packages… W: Failed to fetch http://deb.debian.org/debian/dists/bookworm/InRelease Temporary failure resolving 'deb.debian.org' W: Failed to fetch http://security.debian.org/debian-security/dists/bookworm-security/InRelease Temporary failure resolving 'security.debian.org' W: Failed to fetch http://deb.debian.org/debian/dists/bookworm-updates/InRelease Temporary failure resolving 'deb.debian.org' W: Failed to fetch https://packages.sury.org/php/dists/bookworm/InRelease Temporary failure resolving 'packages.sury.org' W: Failed to fetch https://dl.yarnpkg.com/debian/dists/stable/InRelease Temporary failure resolving 'dl.yarnpkg.com' W: Failed to fetch http://forge.yunohost.org/debian/dists/bookworm/InRelease Temporary failure resolving 'forge.yunohost.org' W: Some index files failed to download. They have been ignored, or old ones used instead. Something went wrong while updating the cache of APT (Debian's package manager). Here is a dump of the sources.list lines, which might help identify problematic lines: sources.list:deb http://deb.debian.org/debian/ bookworm main sources.list:deb-src http://deb.debian.org/debian/ bookworm main sources.list:deb http://security.debian.org/debian-security bookworm-security main sources.list:deb-src http://security.debian.org/debian-security bookworm-security main sources.list:deb http://deb.debian.org/debian/ bookworm-updates main sources.list:deb-src http://deb.debian.org/debian/ bookworm-updates main sources.list.d/extra_php_version.list:deb https://packages.sury.org/php/ bookworm main sources.list.d/yarn.list:deb [signed-by=/etc/apt/trusted.gpg.d/yarn.gpg] https://dl.yarnpkg.com/debian/ stable main sources.list.d/yunohost.list:deb [signed-by=/usr/share/keyrings/yunohost-bookworm.gpg] http://forge.yunohost.org/debian/ bookworm stable Updating application catalog… Unable to download the default app catalog: Failed to connect to https://app.yunohost.org/default/v3/apps.json... maybe the service is down, or you are not properly connected to the Internet in IPv4/IPv6. Command '['git', 'ls-remote', '--symref', 'https://github.com/YunoHost-Apps/navidrome_ynh', 'HEAD']' returned non-zero exit status 128.


I get that it's a connection issue, but I can't update the DNS through ynh admin panel: it's not connecting either. I'm wary of fiddling with the DNS settings manually until I understand what's going on. I don't have access to my server's router until some time next week.

All my services seem to still be working. My blog, which is on that TLD is up and I can access the WordPress admin panel.

[10:02:00] <Marc_> > https://doc.yunohost.org/en/fail2ban#whitelist-an-ip-address ;)
I found it, thanks !
[10:02:14] <Marc_> I think it's all right now
[10:07:41] <tituspijean> @danceswithcats:dwccloud.ukwhat's the status/log of the dnsmasq service?
[10:08:43] <tituspijean> (erf sorry, my server was down for two days and now my message history is messed up, I did not see your message was from January 3rd 😅 )
[10:47:15] <studio5> Hello, First thank you for your great job ! I've an Issue to change my Ip associated to a yunohost domain. Have yo an idea ? Thank you again https://paste.yunohost.org/raw/qesabegemo
[11:04:56] <gredin67> which branch of nextcloud_ynh would you advice to upgrade to ? I'm currently on 27.0.1~ynh1 and YunoHost 11.3.0.2 (stable). Given latest nextcloud version is not always stable enough..
[11:15:54] <rodinux> you should upgrade to last stable for Debian 11, nextcloud 28.0.10
[11:16:50] <gredin67> is there still a branch maintained for this ?
[11:17:33] <gredin67> should I upgrade to 28 before migrating my server to ynh12 or rather after ?
[11:20:33] <rodinux> you should upgrade all your apps and system before do a migration to Yunohost 12
[11:22:55] <rodinux> sorry, I mean 29.0.10 is the last stable for Yunohost Debian 12, you can upgrade with the branch oldstable `yunohost app upgrade nextcloud -u https://github.com/YunoHost-Apps/nextcloud_ynh/tree/oldstable --debug`
[11:24:10] <gredin67> you mean 29.0.10 is the last stable for Yunohost Debian **11** ?
[11:24:59] <gredin67> I think 30 is the last stable for yunohost 12
[11:26:02] <rodinux> yes but only works for Debian 12
[11:26:36] <gredin67> okay I think I get it
[11:26:54] <gredin67> thanks
[14:11:02] <ben> Anyone any ideas?
[14:44:59] <Lasse Gismo> > <@PommyK:matrix.org> Hi Aleks.
>
> Are there already initial insights into my YNH11ToYNH12 restore problem?
>
> What I did:
> - prepared new image
> - forgot to run a full-upgrade :-(
> - created user and domain via web UI
> - ran full restore - anded up with "nextcloud not part of the installead apps list" error
> - ran "sudo apt update" and "sudo apt full-upgrade
> - reboot
> - ran apps restore - see image
> - got all the last 7 app restore error logs
>
> The list of logs starts with the very first:
>
> https://paste.yunohost.org/raw/ijuzigiquq
> https://paste.yunohost.org/raw/ututunobad
> https://paste.yunohost.org/raw/ijetazufiw
> https://paste.yunohost.org/raw/eyaqucikoj
> https://paste.yunohost.org/raw/yadubuqata
> https://paste.yunohost.org/raw/orutapuqag
> https://paste.yunohost.org/raw/zezokanigu
> https://paste.yunohost.org/raw/otupipafop
> https://paste.yunohost.org/raw/vanemuwecu
> https://paste.yunohost.org/raw/eloroqunej
> https://paste.yunohost.org/raw/pazupuhevi
>

Next day - next try 😉
Any one any feedback to my YNH11on32Bit-2-YNH12on64Bit migration project with failed full-restore?
[14:46:16] <nicofrand> Isn't that https://github.com/YunoHost/issues/issues/2474 ?
[14:49:27] <miro5001> https://cybersecuritynews.com/redis-server-vulnerabilities/
[14:56:36] <ben> sounds similar, could be the same problem, in my case I have the main domain not setup on the server but only subdomains. I way playing with the idea to set the main domain up and then just delete it again to cause a re-initialization of the whole part, but also I don't want to break it more than it is.

My alternative is to use another unrelated domains as the main domain... or setup the portal.example.org as my main domain.

Tricky stuff.

Anyway that you very much, I did not see the github issue before and also I did not read through the release/migration post comments. So your reply was very helpful!
[15:10:17] <MCMic> Hello. I have a VPN setup and it works fine. The only problem I have is, from time to time, my server is not available from local network. When in this situation, if use the IP of the server on the local network it works. If I switch to 3G it I can correctly contact it on the VPN IP. But from the local network I cannot ping the VPN external IP. What could be the reason of this behavior, and which culprit is most likely?
[17:45:06] <@err404:matrix.numericore.com> MCMic: did you used ip address or domain name? (I mean it is a network issue or a domaine name resolution issue?)
[18:16:53] <MCMic> I have the same result pinging the IP so it's network I think.
[19:05:13] <MCMic> Yeah but not all my devices use the same resolver, my pc have "unbind"(unbound?) while the phone use the resolver from the box
[19:05:18] <Paprika> You need to set up a static DNS entry on your router or whatever you use (or at the very least, your VPN clients) for your DNS resolver, to make sure the external IP / domain is resolved to the local IP. This will solve your connectivity issue most likely.
[19:06:10] <Paprika> In that case, I'd make sure that the VPN clients use the same DNS server. This can be configured in the VPN client configurations most of the time, but it will all depend on your use case and situation.