Let's Encrypt의 Certbot 도메인을 확인하기 위해 서버가 클라이언트에 연결할 수 없습니다.

Docker를 사용하여 AWS에서 Sentry를 실행하고 있습니다. 이제 서비스가 포트 9000에서 실행되고 있습니다.

HTTPS를 사용하고 Let's Encrypt에서 인증서를 받고 싶습니다. 하지만 다음과 같은 오류가 발생합니다.

sudo certbot --nginx certonly

Saving debug log to /var/log/letsencrypt/letsencrypt.log

Which names would you like to activate HTTPS for?
------------------------------------------------------------------------------- 1: sentry.example.com
------------------------------------------------------------------------------- Select the appropriate numbers separated by commas and/or spaces, or
leave input blank to select all options shown (Enter 'c' to cancel): **1**
Obtaining a new certificate Performing the following challenges:
tls-sni-01 challenge for sentry.example.com Waiting for
verification... Cleaning up challenges Failed authorization procedure.
sentry.example.com (tls-sni-01): urn:acme:error:connection :: The
server could not connect to the client to verify the domain ::
Connection reset by peer

IMPORTANT NOTES:
 - The following errors were reported by the server:

   Domain: sentry.example.com    Type:   connection    Detail:
Connection reset by peer

   To fix these errors, please make sure that your domain name was   
entered correctly and the DNS A/AAAA record(s) for that domain   
contain(s) the right IP address. Additionally, please check that   
your computer has a publicly routable IP address and that no   
firewalls are preventing the server from communicating with the   
client. If you're using the webroot plugin, you should also verify   
that you are serving files from the webroot path you provided.
root@ip-172-31-23-107:/home/ubuntu/onpremise# netstat -ntlp Active
Internet connections (only servers)

netstat -ntlp

AWS "방화벽" 규칙

온라인 DNS 조회