Start here
Initial diagnostics
super-server status super-server doctor systemctl --failed --no-pager tail -n 150 /var/log/snyt-superserver.log
Domain or SSL does not work
Could not resolve host
Confirm the exact domain spelling and DNS record. A difference such as uti.example.com versus util.example.com is enough to fail.
dig +short util.example.com getent hosts util.example.com
Certificate validation failed
certbot certificates journalctl -u certbot.timer --no-pager ufw status verbose
Ports 80 and 443 must reach the selected web server.
PHP-FPM does not respond
Check the service, pool listener and runtime directory:
PHP 8.5 example
systemctl status php8.5-fpm --no-pager /usr/sbin/php-fpm8.5 -tt grep -RhsE '^[[:space:]]*listen[[:space:]]*=' /etc/php/8.5/fpm/pool.d/ ls -la /run/php journalctl -u php8.5-fpm -n 80 --no-pager
Web server configuration
Configuration tests
# Nginx nginx -t journalctl -u nginx -n 80 --no-pager # Apache apache2ctl configtest journalctl -u apache2 -n 80 --no-pager
CrowdSec and bouncers
SuperServer v3.5.2 includes recovery for the firewall-bouncer packaging problem seen on Ubuntu 26.04.
CrowdSec diagnostics
systemctl status crowdsec --no-pager systemctl status crowdsec-firewall-bouncer --no-pager cscli bouncers list cscli collections list cscli metrics journalctl -u crowdsec-firewall-bouncer -n 100 --no-pager
APT or dpkg is interrupted
Package recovery
dpkg --audit dpkg --configure -a apt-get -f install apt update
Do not mix PHP repositories from a different Ubuntu or Debian codename. SuperServer manages one validated provider at a time.
Share logs safely
Do not publish /root/SNYT/serverInfo.txt without removing passwords.
Redact credentials
sed -E '/[Pp]assword:/s/:.*/: [REDACTED]/' /root/SNYT/serverInfo.txt