fail when deploy to fly

[poentodewo]

how to fix health test in fly io i was try to deploy in fly but always fail in health check ? y can see eror in my action log

[ignoramous]

cc: @amithm7

I'm not sure if all instructions to deploy to fly are up, but I'll let amith clarify.

Can you post logs?

[poentodewo]

@ignoramous you can check it in my log github action i have forked this repo

2021-11-21T12:36:18.000 [info] at async ESMLoader.import (node:internal/modules/esm/loader:331:24)
2021-11-21T12:36:18.000 [info] at async loadESM (node:internal/process/esm_loader:88:5)
2021-11-21T12:36:18.000 [info] at async handleMainPromise (node:internal/modules/run_main:65:12)
2021-11-21T12:36:18.000 [info] Node.js v17.1.0
2021-11-21T12:36:19.000 [info] Main child exited normally with code: 1
2021-11-21T12:36:19.000 [info] Starting clean up.
2021-11-21T12:36:25.000 [info] Starting instance
2021-11-21T12:36:25.000 [info] Configuring virtual machine
2021-11-21T12:36:25.000 [info] Pulling container image
2021-11-21T12:36:26.000 [info] Unpacking image
2021-11-21T12:36:26.000 [info] Preparing kernel init
2021-11-21T12:36:26.000 [info] Configuring firecracker
2021-11-21T12:36:27.000 [info] Starting virtual machine
2021-11-21T12:36:27.000 [info] Starting init (commit: 7943db6)...
2021-11-21T12:36:27.000 [info] Preparing to run: docker-entrypoint.sh node server.js as root
2021-11-21T12:36:27.000 [info] 2021/11/21 12:36:27 listening on [fdaa:0:3a42:a7b:f0f:5721:6419:2]:22 (DNS: [fdaa::3]:53)
2021-11-21T12:36:27.000 [info] file:///node-dir/helpers/node/util.js:8
2021-11-21T12:36:27.000 [info] if (TLS_CRT_KEY == undefined) throw new Error("TLS cert / key not found");
2021-11-21T12:36:27.000 [info] ^
2021-11-21T12:36:27.000 [info] Error: TLS cert / key not found
2021-11-21T12:36:27.000 [info] at getTLSfromEnv (file:///node-dir/helpers/node/util.js:8:39)
2021-11-21T12:36:27.000 [info] at file:///node-dir/helpers/node/config.js:28:7
2021-11-21T12:36:27.000 [info] at ModuleJob.run (node:internal/modules/esm/module_job:195:25)
2021-11-21T12:36:27.000 [info] at async Promise.all (index 0)
2021-11-21T12:36:27.000 [info] at async ESMLoader.import (node:internal/modules/esm/loader:331:24)
2021-11-21T12:36:27.000 [info] at async loadESM (node:internal/process/esm_loader:88:5)
2021-11-21T12:36:27.000 [info] at async handleMainPromise (node:internal/modules/run_main:65:12)
2021-11-21T12:36:27.000 [info] Node.js v17.1.0
2021-11-21T12:36:28.000 [info] Main child exited normally with code: 1
2021-11-21T12:36:28.000 [info] Starting clean up.

[ignoramous]

The log says you haven't setup TLS. Right now, the app terminates TLS on its own, and doesn't rely on Fly for it.

We haven't open sourced automatic generation of TLS certs (which would be useless anyway since it requires one to use Route53 which is expensive). There are two (not so straight-forward) options for you:

1. Vend wildcard certs from ZeroSSL for the domain you own using acme.sh and deploy to your Fly app as a secret.
2. Use Fly to vend wildcard certs (they charge $2 per month for it) and use their TLS termination instead (code changes required).

Terminating TLS within app is required for DoT, but not for DoH. We should support DoH-only deployments on Fly, but we don't yet.

Note that, we vend certs from ZeroSSL because LetsEncrypt certs don't work with Android's Private DNS anymore (due to a bug in Android's DoT implementation in how it evaluates cert chains).

[amithm7]

@poentodewo Hi, the nodeJS app requires a SSL / TLS certificate and key pair.

Once you decide how to generate them, how to specify them is written at README.md#node and .env.example file

[poentodewo]

okay I was generating from zerossl where shoud I put key and crt file ? il try it to adding from fly dashboard and just nothing happen
@amithm7 @ignoramous

[amithm7]

You have to put them in the fly secrets an environment variable as described in the .env.example file.

[ignoramous]

@poentodewo

You probably want to wait for us to make it easier to deploy to Fly.

Two things I see for us to improve:

1. For just DoH, it is enough to rely on Fly terminating TLS on our behalf.

2. For DoT, probably a step-by-step documentation on configuration and deploy.

[poentodewo]

well im no luck just got fail event i was adding with secrets set TLS_KEY and TLS_CRT

I think better wait for easier to deploy then test it

[poentodewo]

@ignoramous was tested new update by deploying in deno and fly. All working dot from fly tested working from my android 11. Only doh from fly when i test from dnscrypt proxy show warning in log not support http/2. I check from curl -v get response only http/1.1

[amithm7]

not support http/2. I check from curl -v get response only http/1.1

yes, http2 is not supported currently on the nodejs app running on fly.

[amithm7]

supports http/2 now :)