Skip to content

nginx: ssl_stapling broken

ssl_stapling is not working as we have not defined a resolver.

The easiest solution is probably pointing to systemd-resolved at 127.0.0.53.

Some log lines from wiki.archlinux.org:

Jul 21 00:08:47 wiki.archlinux.org nginx[445687]: 2024/07/21 00:08:47 [warn] 445687#445687: no resolver defined to resolve e6.o.lencr.org while requesting certificate status, responder: e6.o.lencr.org, certificate: "/etc/letsencrypt/live/wiki.archlinux.org/fullchain.pem"
Jul 21 00:08:47 wiki.archlinux.org nginx[445686]: 2024/07/21 00:08:47 [warn] 445686#445686: no resolver defined to resolve e6.o.lencr.org while requesting certificate status, responder: e6.o.lencr.org, certificate: "/etc/letsencrypt/live/wiki.archlinux.org/fullchain.pem"
Jul 21 00:08:47 wiki.archlinux.org nginx[445688]: 2024/07/21 00:08:47 [warn] 445688#445688: no resolver defined to resolve e6.o.lencr.org while requesting certificate status, responder: e6.o.lencr.org, certificate: "/etc/letsencrypt/live/wiki.archlinux.org/fullchain.pem"
Jul 21 00:08:47 wiki.archlinux.org nginx[445689]: 2024/07/21 00:08:47 [warn] 445689#445689: no resolver defined to resolve e6.o.lencr.org while requesting certificate status, responder: e6.o.lencr.org, certificate: "/etc/letsencrypt/live/wiki.archlinux.org/fullchain.pem"
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information