BielframosOriginal post
Rank 2: Process
Hi Appwrite Team,
I'm having issues generating an SSL certificate for a wildcard custom domain on the Sites service.
I created a CNAME record pointing *.sites.appwrite.mydomain.com to mydomain.com, and my deployed site (svelte-starter.sites.appwrite.mydomain.com) works correctly over HTTP.
To validate that DNS challenges are working, I manually ran a DNS-01 challenge using Certbot for the wildcard domain (*.sites.appwrite.mydomain.com) and successfully validated the TXT record manually.
Despite this, SSL generation via Appwrite still fails with the following log output:
appwrite-worker-certificates | Cannot renew domain (svelte-starter.sites.appwrite.mydomain.com) on attempt no. 5 certificate: Failed to verify domain DNS records.
appwrite-worker-certificates | [Job] (6833e8f7f17c82.53601748) failed to run.
appwrite-worker-certificates | [Job] (6833e8f7f17c82.53601748) Failed to verify domain DNS records.
appwrite-worker-certificates | [Error] Type: Exception
appwrite-worker-certificates | [Error] Message: Failed to verify domain DNS records.
appwrite-worker-certificates | [Error] File: /usr/src/code/src/Appwrite/Platform/Workers/Certificates.php
appwrite-worker-certificates | [Error] Line: 338
Could you help clarify why the DNS challenge validation is failing despite the DNS configuration being accessible and externally verifiable?
Thanks in advance!
Summary
Developers experienced trouble generating an SSL certificate for a wildcard custom domain on the Sites service. By correctly setting the variables APP_DOMAIN_TARGET_A, APP_DOMAIN_TARGET_AAAA, and APP_DOMAIN_TARGET_CNAME, recreating the containers, and running a command to generate the certificate, the issue was resolved successfully.