http://wiki.folk.zone/ 2026-06-21T11:37:42+00:00 http://wiki.folk.zone/ http://wiki.folk.zone/lib/exe/fetch.php?media=wiki:dokuwiki.svg text/html 2026-06-20T05:25:11+00:00 Anonymous (anonymous@undisclosed.example.com) http://wiki.folk.zone/doku.php?id=troubleshooting:caddy_deploy_proxy_coolify_directly&rev=1781933111&do=diff Caddy Must Proxy Coolify Directly, Not via Traefik Status: Resolved\ Date: 2026-05-27\ Affected service: Caddy, Coolify Symptom deploy.folk.zone returned errors after GoToSocial was added to the stack and Caddy was restarted. All other services continued to work. text/html 2026-06-20T05:25:11+00:00 Anonymous (anonymous@undisclosed.example.com) http://wiki.folk.zone/doku.php?id=troubleshooting:caddy_traefik_port_conflict&rev=1781933111&do=diff Caddy Port Conflict with Coolify Traefik Status: Resolved Date: 2026-05-27 Affected service: Caddy Symptom After restarting the Caddy container, it failed to start with: Bind for 0.0.0.0:80 failed: port is already allocated All services at folk.zone subdomains returned 502 Bad Gateway. text/html 2026-06-20T05:25:11+00:00 Anonymous (anonymous@undisclosed.example.com) http://wiki.folk.zone/doku.php?id=troubleshooting:cloudflare_add_hostname&rev=1781933111&do=diff Adding a Hostname to a Named Tunnel DEPRECATED: This guide is no longer relevant for folk.zone. The nitro server uses direct HTTPS via Let's Encrypt instead of Cloudflare tunnels. Status: Resolved Affects: Cloudflare Tunnel The only correct way to add a new subdomain route to a Named Tunnel is through the text/html 2026-06-20T05:25:11+00:00 Anonymous (anonymous@undisclosed.example.com) http://wiki.folk.zone/doku.php?id=troubleshooting:cloudflare_dns_vs_route&rev=1781933111&do=diff DNS Records vs. Tunnel Routes Are Different Things DEPRECATED: This guide is no longer relevant for folk.zone. The nitro server uses direct HTTPS via Let's Encrypt instead of Cloudflare tunnels. Affects: Cloudflare Tunnel Common Mistake Creating a CNAME record in Cloudflare text/html 2026-06-20T05:25:11+00:00 Anonymous (anonymous@undisclosed.example.com) http://wiki.folk.zone/doku.php?id=troubleshooting:cloudflare_named_tunnel_remote_config&rev=1781933111&do=diff Named Tunnels Use Remote Configuration DEPRECATED: This guide is no longer relevant for folk.zone. The nitro server uses direct HTTPS via Let's Encrypt instead of Cloudflare tunnels. Affects: Cloudflare Tunnel Fact When config.yml contains a tunnel: field with a tunnel ID, cloudflared ignores local text/html 2026-06-20T05:25:11+00:00 Anonymous (anonymous@undisclosed.example.com) http://wiki.folk.zone/doku.php?id=troubleshooting:coolify_fail2ban&rev=1781933111&do=diff fail2ban Blocks Coolify Container After Repeated SSH Failures Affects: Coolify Symptom After repeated failed SSH connection attempts during Coolify setup, fail2ban bans the Coolify container's IP, causing all subsequent SSH attempts to silently fail even after the key is fixed. text/html 2026-06-20T05:25:11+00:00 Anonymous (anonymous@undisclosed.example.com) http://wiki.folk.zone/doku.php?id=troubleshooting:coolify_root_ssh&rev=1781933111&do=diff Coolify Requires Root SSH Access to the Host Affects: Coolify Fact Coolify connects to the host via SSH as root to manage deployments. By default, Ubuntu disables root password login but key-based root login may also be restricted. Check sshd_config grep PermitRootLogin /etc/ssh/sshd_config text/html 2026-06-20T05:25:11+00:00 Anonymous (anonymous@undisclosed.example.com) http://wiki.folk.zone/doku.php?id=troubleshooting:coolify_ssh_docker_gateway&rev=1781933111&do=diff Coolify Uses Docker Network Gateway as Host IP Affects: Coolify Fact From inside a Docker container, the correct IP to reach the host machine is the Docker network gateway, not the server's LAN IP or host.docker.internal. For the cafe stack: * ✅ Correct: text/html 2026-06-20T05:25:11+00:00 Anonymous (anonymous@undisclosed.example.com) http://wiki.folk.zone/doku.php?id=troubleshooting:coolify_ssh_key_ui_only&rev=1781933111&do=diff Always Add SSH Keys via Coolify UI, Never Directly to Database Affects: Coolify Fact Coolify stores private keys encrypted using Laravel's encryption (APP_KEY). Inserting a raw private key directly into the private_keys table will result in: * “The payload is invalid text/html 2026-06-20T05:25:11+00:00 Anonymous (anonymous@undisclosed.example.com) http://wiki.folk.zone/doku.php?id=troubleshooting:coolify_ssh_setup&rev=1781933111&do=diff Coolify SSH Key Setup Status: Resolved Date: 2026-05 (initial setup) Affects: Coolify Full incident summary. Each root cause has its own atomic page. Root Causes (atomic pages) * Private keys must be added via Coolify UI, not directly to database * Correct host IP is the Docker network gateway (172.18.0.1), not LAN IP * Coolify requires root SSH access — PermitRootLogin prohibit-password * fail2ban bans the Coolify container IP after repeated failures Quick Fix Sequence 1. Genera… text/html 2026-06-20T05:25:11+00:00 Anonymous (anonymous@undisclosed.example.com) http://wiki.folk.zone/doku.php?id=troubleshooting:dokuwiki_install_illegal_value&rev=1781933111&do=diff DokuWiki Installer "Illegal or Empty Value" Error Status: Resolved Date: 2026-05-27 Affected service: DokuWiki Symptom The install.php setup wizard returned “illegal or empty value” when submitting the form, even when all fields appeared to be filled in. text/html 2026-06-20T05:25:11+00:00 Anonymous (anonymous@undisclosed.example.com) http://wiki.folk.zone/doku.php?id=troubleshooting:duplicati_password_setup&rev=1781933111&do=diff Duplicati Initial Password Setup (linuxserver image) Status: Resolved Date: 2026-05-27 Affected service: Duplicati Symptom After deploying linuxserver/duplicati, the web UI showed a password prompt with no initial setup screen — even after clearing the config directory. text/html 2026-06-20T05:25:11+00:00 Anonymous (anonymous@undisclosed.example.com) http://wiki.folk.zone/doku.php?id=troubleshooting:gotosocial_federation&rev=1781933111&do=diff GoToSocial Federation & Follow Troubleshooting Status: Resolved Date: 2026-05-27 Affected service: GoToSocial Symptom Follow requests sent from @brennan@folk.zone showed as “requested” on the client but never appeared as pending on the remote instance (social.lol). Reverse follows from social.lol also failed to appear on the GTS side. text/html 2026-06-20T05:25:11+00:00 Anonymous (anonymous@undisclosed.example.com) http://wiki.folk.zone/doku.php?id=troubleshooting:miniflux_freshrss&rev=1781933111&do=diff Miniflux SQLite Configuration Issue Status: Resolved (switched to FreshRSS) Date: 2026-05-27 Affected service: RSS feed reader Symptom Miniflux container repeatedly crashed with dial tcp [::1]:5432: connect: connection refused despite configuring SQLite via text/html 2026-06-20T05:25:11+00:00 Anonymous (anonymous@undisclosed.example.com) http://wiki.folk.zone/doku.php?id=troubleshooting:start&rev=1781933111&do=diff Troubleshooting Log Each page is named as the root cause (a fact), not a question. Complex incidents are split into atomic pages covering each distinct concept. Cloudflare Tunnel * Named Tunnels Use Remote Configuration * Adding a Hostname to a Named Tunnel * DNS Records vs. Tunnel Routes Are Different Things Coolify SSH Setup * Coolify SSH Key Setup (full incident summary) *