Make sure the port 80 is open in your firewall. I can test this out from different station with nmap utility:
apt-get install nmap
nmap -p 80 5d61057e5e1f.sn.mynetname.net
This will show me:
Starting Nmap 7.40 ( "https://nmap.org" ) at 2018-02-20 19:51 EET
Nmap scan report for 5d61057e5e1f.sn.mynetname.net (46.109.42.228)
Host is up (0.0084s latency).
PORT STATE SERVICE
80/tcp open http
Nmap done: 1 IP address (1 host up) scanned in 0.39 seconds
Check the web root location:
grep "root" /etc/nginx/sites-available/5d61057e5e1f.sn.mynetname.net
This will output:
root /var/www/html;
root /var/www/html;
Install latest certbot utility:
curl -s "https://dl.eff.org/certbot-auto" > /usr/bin/certbot
chmod 770 /usr/bin/certbot
Now I can test dry-run:
certbot certonly --dry-run -a webroot -w /var/www/html -d 5d61057e5e1f.sn.mynetname.net
Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator webroot, Installer None
Cert is due for renewal, auto-renewing...
Renewing an existing certificate
Performing the following challenges:
http-01 challenge for 5d61057e5e1f.sn.mynetname.net
Using the webroot path /var/www/html for all unmatched domains.
Waiting for verification...
Cleaning up challenges
IMPORTANT NOTES:
- The dry run was successful.
Tell the certbot agent that after successful certificate renewal nginx service should be reloaded:
echo renew-hook = systemctl reload nginx> /etc/letsencrypt/cli.ini
And this is the line in crontab for user root:
00 02 03 * * certbot certonly --force-renewal -a webroot -w /var/www/html -d 5d61057e5e1f.sn.mynetname.net
To check if renewal was successful look inside:
cat /var/log/letsencrypt/letsencrypt.log
