"cp: cannot stat"

[aaronshaf]

cp: cannot stat ‘/etc/letsencrypt/live/hello-world.[my-domain].com/privkey.pem’: Permission denied

Any ideas? I ran it with and without sudo.

[almereyda]

The same here. It also seems the respective nginx.conf of the associated application does not get updated to use port 443.

Interestingly it seems https://github.com/sgulseth/dokku-letsencrypt/blob/master/install#L7 had only been applied to /etc/letsencrypt but not its subfolders. Simply running it again and reissuing the certificate made the error disappear.

Who is changing the permissions here after we thought we were done?

[sgulseth]

If you ran the "sign" command with sudo, root will own the files in the "/etc/letsencrypt/live/domain"-folder. A fix for this could be to fix folder permissions when signing, so root doesn't own the files.