docker compose -f docker-compose.yml -f docker-compose.dev.yml --env-file .env up permission denied while trying to connect to the Docker daemon socket at unix:///var/run/docker.sock: Get "http://%2Fvar%2Frun%2Fdocker.sock/v1.45/containers/json?all=1&filters=%7B%22label%22%3A%7B%22com.docker.compose.config-hash%22%3Atrue%2C%22com.docker.compose.project%3Dpolis-dev%22%3Atrue%7D%7D": dial unix /var/run/docker.sock: connect: permission denied make: *** [Makefile:34: start] Error 1

server-1 | info: not whitelisted ... ,"path":"/api/v3/auth/new","service":"polis-api-server","timestamp":"2024-06-18 08:07:22 +00:00"} server-1 | POST /api/v3/auth/new 500 160.657 ms - 40 server-1 | unauthorized domain: http://<IP>

server { listen 80; server_name your_domain.com; return 301 https://$host$request_uri; } server { listen 443 ssl; server_name your_domain.com; ssl_certificate /etc/letsencrypt/live/your_domain.com/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/your_domain.com/privkey.pem; location / { proxy_pass http://localhost:8080; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto $scheme; } }

Saving debug log to /var/log/letsencrypt/letsencrypt.log Error while running nginx -c /etc/nginx/nginx.conf -t. 2024/06/18 08:59:32 [emerg] 12342#12342: cannot load certificate "/etc/letsencrypt/live/your_domain.com/fullchain.pem": BIO_new_file() failed (SSL: error:80000002:system library::No such file or directory:calling fopen(/etc/letsencrypt/live/your_domain.com/fullchain.pem, r) error:10000080:BIO routines::no such file) nginx: configuration file /etc/nginx/nginx.conf test failed The nginx plugin is not working; there may be problems with your existing configuration. The error was: MisconfigurationError('Error while running nginx -c /etc/nginx/nginx.conf -t.\n\n2024/06/18 08:59:32 [emerg] 12342#12342: cannot load certificate "/etc/letsencrypt/live/your_domain.com/fullchain.pem": BIO_new_file() failed (SSL: error:80000002:system library::No such file or directory:calling fopen(/etc/letsencrypt/live/your_domain.com/fullchain.pem, r) error:10000080:BIO routines::no such file)\nnginx: configuration file /etc/nginx/nginx.conf test failed\n')

$ sudo certbot --nginx -d polis.nhiro.org Saving debug log to /var/log/letsencrypt/letsencrypt.log Enter email address (used for urgent renewal and security notices) (Enter 'c' to cancel): nishio.hirokazu@gmail.com - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Please read the Terms of Service at https://letsencrypt.org/documents/LE-SA-v1.4-April-3-2024.pdf. You must agree in order to register with the ACME server. Do you agree? - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - (Y)es/(N)o: y - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Would you be willing, once your first certificate is successfully issued, to share your email address with the Electronic Frontier Foundation, a founding partner of the Let's Encrypt project and the non-profit organization that develops Certbot? We'd like to send you email about our work encrypting the web, EFF news, campaigns, and ways to support digital freedom. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - (Y)es/(N)o: y Account registered. Requesting a certificate for polis.nhiro.org Successfully received certificate. Certificate is saved at: /etc/letsencrypt/live/polis.nhiro.org/fullchain.pem Key is saved at: /etc/letsencrypt/live/polis.nhiro.org/privkey.pem This certificate expires on 2024-09-16. These files will be updated when the certificate renews. Certbot has set up a scheduled task to automatically renew this certificate in the background. Deploying certificate Successfully deployed certificate for polis.nhiro.org to /etc/nginx/sites-enabled/default Congratulations! You have successfully enabled HTTPS on https://polis.nhiro.org - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - If you like Certbot, please consider supporting our work by: * Donating to ISRG / Let's Encrypt: https://letsencrypt.org/donate * Donating to EFF: https://eff.org/donate-le - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

$ sudo systemctl restart nginx Job for nginx.service failed because the control process exited with error code. See "systemctl status nginx.service" and "journalctl -xeu nginx.service" for details.

Jun 18 09:04:06 ip-172-31-37-50 nginx[12385]: 2024/06/18 09:04:06 [emerg] 12385#12385: cannot load certificate "/etc/letsencrypt/live/your_domain.com/fullchain.pem": BIO_new_file() failed (> Jun 18 09:04:06 ip-172-31-37-50 nginx[12385]: nginx: configuration file /etc/nginx/nginx.conf test failed

Error response from daemon: driver failed programming external connectivity on endpoint polis-dev-nginx-proxy-1 (432b7de15349df46efb04a246102c6e420b7fdd790f2d3580a4ad0afc313a5cd): Error starting userland proxy: listen tcp4 0.0.0.0:443: bind: address already in use

$ sudo nginx -t 2024/06/18 14:18:04 [warn] 53602#53602: conflicting server name "polis.nhiro.org" on 0.0.0.0:443, ignored

ubuntu@ip-172-31-37-50:~/polis$ grep -r "server_name polis.nhiro.org" /etc/nginx/ /etc/nginx/sites-available/default: server_name polis.nhiro.org; /etc/nginx/sites-available/default: server_name polis.nhiro.org; /etc/nginx/sites-available/default: server_name polis.nhiro.org; ubuntu@ip-172-31-37-50:~/polis$ grep -r "server_name polis.nhiro.org" . ./file-server/nginx/nginx-ssl.site.default.conf: server_name polis.nhiro.org;

PROD: ## Run in prod mode (e.g. `make PROD start`, etc.) using config in `prod.env` $(eval ENV_FILE = prod.env) $(eval TAG = $(shell grep -e ^TAG ${ENV_FILE} | awk -F'[=]' '{gsub(/ /,"");print $$2}')) $(eval COMPOSE_FILE_ARGS = -f docker-compose.yml) start: echo_vars ## Start all Docker containers docker compose ${COMPOSE_FILE_ARGS} --env-file ${ENV_FILE} up

server { listen 443 ssl; server_name your_domain.com; ssl_certificate /etc/nginx/certs/your_production.cert.pem; ssl_certificate_key /etc/nginx/certs/your_production.key.pem; # その他の設定 }

FROM docker.io/nginx:1.21.5-alpine COPY nginx/nginx-ssl.site.default.conf /etc/nginx/conf.d/default.conf COPY nginx/certs/your_production.cert.pem /etc/nginx/certs/your_production.cert.pem COPY nginx/certs/your_production.key.pem /etc/nginx/certs/your_production.key.pem EXPOSE 80 EXPOSE 443

COPY /etc/letsencrypt/live/polis.nhiro.org/fullchain.pem /etc/nginx/certs/nhiro-fullchain.pem COPY /etc/letsencrypt/live/your_domain.com/privkey.pem /etc/nginx/certs/nhiro-privkey.pem

ssl_certificate /etc/nginx/certs/nhiro-fullchain.pem; ssl_certificate_key /etc/nginx/certs/nhiro-privkey.pem;

------ > [nginx-proxy 5/6] COPY /etc/letsencrypt/live/polis.nhiro.org/fullchain.pem /etc/nginx/certs/nhiro-fullchain.pem: ------ ------ > [nginx-proxy 6/6] COPY /etc/letsencrypt/live/your_domain.com/privkey.pem /etc/nginx/certs/nhiro-privkey.pem: ------ failed to solve: failed to compute cache key: failed to calculate checksum of ref fdb69f4f-67cc-489f-8061-2f3a24921a15::imnifc4l0wil7tzgrsjx1ezl9: "/etc/letsencrypt/live/your_domain.com/privkey.pem": not found make: *** [Makefile:61: build-no-cache] Error 17

27.89 Downloading: com/cnuernber/jarrow/1.000/jarrow-1.000.jar from clojars 27.90 Error building classpath. Could not transfer artifact org.apache.commons:commons-math3:jar:3.6.1 from/to central (https://repo1.maven.org/maven2/): No space left on device ------ failed to solve: process "/bin/sh -c clojure -A:dev -P" did not complete successfully: exit code: 1 make: *** [Makefile:61: build-no-cache] Error 17

# 停止中のすべてのコンテナを削除 docker container prune # 使用されていないすべてのイメージを削除 docker image prune -a # 使用されていないすべてのボリュームを削除 docker volume prune # 使用されていないすべてのネットワークを削除 docker network prune

$ df -h Filesystem Size Used Avail Use% Mounted on /dev/root 6.8G 6.5G 217M 97% /

$ df -h Filesystem Size Used Avail Use% Mounted on /dev/root 6.8G 6.0G 752M 90% /

------ > [file-server client-participation 4/6] RUN npm ci --production=false: 1.505 npm warn config production Use `--omit=dev` instead. 47.22 npm warn tar TAR_ENTRY_ERROR ENOSPC: no space left on device, write 47.28 npm notice 47.28 npm notice New minor version of npm available! 10.7.0 -> 10.8.1 47.28 npm notice Changelog: https://github.com/npm/cli/releases/tag/v10.8.1 47.28 npm notice To update run: npm install -g npm@10.8.1 47.28 npm notice 47.29 npm error code ENOSPC 47.29 npm error syscall write 47.29 npm error errno -28 47.29 npm error nospc ENOSPC: no space left on device, write 47.29 npm error nospc There appears to be insufficient space on your system to finish. 47.29 npm error nospc Clear up some disk space and try again. 47.30 47.30 npm error A complete log of this run can be found in: /root/.npm/_logs/2024-06-19T05_44_05_167Z-debug-0.log ------ ------ > [file-server client-report 6/7] COPY client-report/. .: ------ failed to solve: process "/bin/sh -c npm ci --production=false" did not complete successfully: exit code: 228 make: *** [Makefile:61: build-no-cache] Error 17

$ df -h Filesystem Size Used Avail Use% Mounted on /dev/root 6.8G 6.4G 359M 95% /

sudo apt-get clean sudo apt-get autoremove

$ df -h Filesystem Size Used Avail Use% Mounted on /dev/root 6.8G 6.2G 577M 92% /

# ルートファイルシステムのデバイス名を確認 lsblk # ルートファイルシステムが /dev/xvda1 であると仮定 sudo growpart /dev/xvda 1 # ファイルシステムを拡張 sudo resize2fs /dev/xvda1

$ lsblk NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINTS loop0 7:0 0 25.2M 1 loop /snap/amazon-ssm-agent/7983 loop1 7:1 0 55.7M 1 loop /snap/core18/2812 loop2 7:2 0 25.2M 1 loop /snap/amazon-ssm-agent/7993 loop3 7:3 0 55.7M 1 loop /snap/core18/2823 loop4 7:4 0 38.7M 1 loop /snap/snapd/21465 loop5 7:5 0 38.8M 1 loop /snap/snapd/21759 xvda 202:0 0 16G 0 disk ├─xvda1 202:1 0 15G 0 part / ├─xvda14 202:14 0 4M 0 part ├─xvda15 202:15 0 106M 0 part /boot/efi └─xvda16 259:0 0 913M 0 part /boot

$ sudo growpart /dev/xvda 1 NOCHANGE: partition 1 is size 31455199. it cannot be grown

$ df -h Filesystem Size Used Avail Use% Mounted on /dev/root 15G 6.2G 8.3G 43% /

COPY /etc/letsencrypt/live/polis.nhiro.org/fullchain.pem /etc/nginx/certs/nhiro-fullchain.pem COPY /etc/letsencrypt/live/your_domain.com/privkey.pem /etc/nginx/certs/nhiro-privkey.pem

# nginx-proxy コンテナを停止 docker compose stop nginx-proxy # nginx-proxy コンテナを削除 docker compose rm -f nginx-proxy # nginx-proxy コンテナをビルド docker compose build nginx-proxy # nginx-proxy コンテナを再起動 docker compose up -d nginx-proxy

=> ERROR [nginx-proxy 5/6] COPY /etc/letsencrypt/live/polis.nhiro.org/fullchain.pem /etc/nginx/certs/nhiro-fullchain.pem 0.0s => ERROR [nginx-proxy 6/6] COPY /etc/letsencrypt/live/polis.nhiro.org/privkey.pem /etc/nginx/certs/nhiro-privkey.pem 0.0s ------ > [nginx-proxy 5/6] COPY /etc/letsencrypt/live/polis.nhiro.org/fullchain.pem /etc/nginx/certs/nhiro-fullchain.pem: ------ ------ > [nginx-proxy 6/6] COPY /etc/letsencrypt/live/polis.nhiro.org/privkey.pem /etc/nginx/certs/nhiro-privkey.pem: ------ failed to solve: failed to compute cache key: failed to calculate checksum of ref fdb69f4f-67cc-489f-8061-2f3a24921a15::y630wak98lsqz4tftvmxyloof: "/etc/letsencrypt/live/polis.nhiro.org/privkey.pem": not found make: *** [Makefile:61: build-no-cache] Error 17

COPY nginx/cert/nhiro-fullchain.pem /etc/nginx/certs/nhiro-fullchain.pem COPY nginx/cert/nhiro-privkey.pem /etc/nginx/certs/nhiro-privkey.pem

=> ERROR [nginx-proxy 5/6] COPY nginx/cert/nhiro-fullchain.pem /etc/nginx/certs/nhiro-fullchain.pem 0.0s => ERROR [nginx-proxy 6/6] COPY nginx/cert/nhiro-privkey.pem /etc/nginx/certs/nhiro-privkey.pem 0.0s ------ > [nginx-proxy 5/6] COPY nginx/cert/nhiro-fullchain.pem /etc/nginx/certs/nhiro-fullchain.pem: ------ ------ > [nginx-proxy 6/6] COPY nginx/cert/nhiro-privkey.pem /etc/nginx/certs/nhiro-privkey.pem: ------ failed to solve: failed to compute cache key: failed to calculate checksum of ref fdb69f4f-67cc-489f-8061-2f3a24921a15::m8mkj6rtbq8r4rggxmzjlbgkw: "/nginx/cert/nhiro-privkey.pem": not found make: *** [Makefile:61: build-no-cache] Error 17

$ docker logs polis-dev-nginx-proxy-1 /docker-entrypoint.sh: /docker-entrypoint.d/ is not empty, will attempt to perform configuration /docker-entrypoint.sh: Looking for shell scripts in /docker-entrypoint.d/ /docker-entrypoint.sh: Launching /docker-entrypoint.d/10-listen-on-ipv6-by-default.sh 10-listen-on-ipv6-by-default.sh: info: Getting the checksum of /etc/nginx/conf.d/default.conf 10-listen-on-ipv6-by-default.sh: info: /etc/nginx/conf.d/default.conf differs from the packaged version /docker-entrypoint.sh: Launching /docker-entrypoint.d/20-envsubst-on-templates.sh /docker-entrypoint.sh: Launching /docker-entrypoint.d/30-tune-worker-processes.sh /docker-entrypoint.sh: Configuration complete; ready for start up 2024/06/19 08:48:42 [emerg] 1#1: cannot load certificate key "/etc/nginx/certs/nhiro-privkey.pem": PEM_read_bio_PrivateKey() failed (SSL: error:0909006C:PEM routines:get_name:no start line:Expecting: ANY PRIVATE KEY) nginx: [emerg] cannot load certificate key "/etc/nginx/certs/nhiro-privkey.pem": PEM_read_bio_PrivateKey() failed (SSL: error:0909006C:PEM routines:get_name:no start line:Expecting: ANY PRIVATE KEY)

FROM docker.io/nginx:1.21.5-alpine COPY nginx/nginx-ssl.site.default.conf /etc/nginx/conf.d/default.conf # We only use these in testing. COPY nginx/certs/snakeoil.cert.pem /etc/nginx/certs/snakeoil.cert.pem COPY nginx/certs/snakeoil.key.pem /etc/nginx/certs/snakeoil.key.pem COPY nginx/certs/nhiro-fullchain.pem /etc/nginx/certs/nhiro-fullchain.pem COPY nginx/certs/nhiro-privkey.pem /etc/nginx/certs/nhiro-privkey.pem EXPOSE 80 EXPOSE 443

# If you are running polis on a custom domain, set both API_PROD_HOSTNAME and DOMAIN_OVERRIDE # to the same value. In the future these will be combined into one setting. API_PROD_HOSTNAME=pol.is DOMAIN_OVERRIDE=

API_PROD_HOSTNAME=polis.nhiro.org DOMAIN_OVERRIDE=polis.nhiro.org

info: not whitelisted {"headers":{"accept":"application/json, text/javascript, */*; q=0.01","accept-encoding":"gzip, deflate, br, zstd","accept-language":"ja,en-US;q=0.9,en;q=0.8,zh;q=0.7,zh-CN;q=0.6,zh-HK;q=0.5,zh-TW;q=0.4","cache-control":"max-age=0","connection":"close","content-length":"97","content-type":"application/json; charset=UTF-8","host":"polis.nhiro.org","origin":"https://polis.nhiro.org","priority":"u=1, i","referer":"https://polis.nhiro.org/createuser","sec-ch-ua":"\"Google Chrome\";v=\"125\", \"Chromium\";v=\"125\", \"Not.A/Brand\";v=\"24\"","sec-ch-ua-mobile":"?0","sec-ch-ua-platform":"\"macOS\"","sec-fetch-dest":"empty","sec-fetch-mode":"cors","sec-fetch-site":"same-origin","user-agent":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36","x-forwarded-proto":"https","x-requested-with":"XMLHttpRequest"},"path":"/api/v3/auth/new","service":"polis-api-server","timestamp":"2024-06-19 09:34:40 +00:00"} POST /api/v3/auth/new 500 4.790 ms - 45 unauthorized domain: https://polis.nhiro.org

# Optionally give the server container a distinct env_file. Useful for CI tests. SERVER_ENV_FILE=.env

$ make PROD start make: 'PROD' is up to date. ENV_FILE=prod.env TAG=dev docker compose -f docker-compose.yml --env-file prod.env up

services: server: env_file: - ${SERVER_ENV_FILE:-.env}

$ df -h Filesystem Size Used Avail Use% Mounted on /dev/root 15G 15G 253M 99% /

# 停止中のすべてのコンテナを削除 docker container prune # 使用されていないすべてのイメージを削除 docker image prune -a # 使用されていないすべてのボリュームを削除 docker volume prune # 使用されていないすべてのネットワークを削除 docker network prune

$ df -h Filesystem Size Used Avail Use% Mounted on /dev/root 15G 14G 627M 96% /

$ sudo du -h --max-depth=1 / 12G /var

/var$ sudo du -h --max-depth=1 . 12G ./lib

/var/lib$ sudo du -h --max-depth=1 . 11G ./docker

$ docker system prune WARNING! This will remove: - all stopped containers - all networks not used by at least one container - all dangling images - unused build cache Are you sure you want to continue? [y/N] y Deleted build cache objects: ... Total reclaimed space: 7.928GB

$ df -h Filesystem Size Used Avail Use% Mounted on /dev/root 15G 3.5G 12G 24% /