# After restarting the server, everything on it stopped working

**URL:** <https://discourse.crowdsec.net/t/after-restarting-the-server-everything-on-it-stopped-working/2358>\
**Category:** crowdsec\
**Created:** [February 15, 2025, 10:38am UTC](https://discourse.crowdsec.net/t/after-restarting-the-server-everything-on-it-stopped-working/2358 "2025-02-15T10:38:56Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![BlinCT](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/blinct/32/1138_2.png) [@BlinCT](https://discourse.crowdsec.net/u/BlinCT)\
**Post date:** [February 15, 2025, 10:38am UTC](https://discourse.crowdsec.net/t/after-restarting-the-server-everything-on-it-stopped-working/2358/1 "2025-02-15T10:38:56Z")

</div>

Hello all.  
I hope someone can help me understand the cause of the problem.  
I have TrueNas scale, traefik and crowdsec containers are installed in Docker. I configured the plugin(crowdsec-bouncer-traefik-plugin) 3 days ago. The dynamic configuration contains the following settings

```auto
    crowdsec:
      plugin:
        bouncer:
          enabled: true
          logLevel: INFO
          updateIntervalSeconds: 15
          updateMaxFailure: 0
          defaultDecisionSeconds: 15
          httpTimeoutSeconds: 10
          crowdsecMode: stream
          crowdsecAppsecEnabled: true
          crowdsecAppsecHost: crowdsec:7422
          crowdsecAppsecFailureBlock: true
          crowdsecAppsecUnreachableBlock: true
          crowdsecLapiKey: *********** # 
          crowdsecLapiHost: crowdsec:8080
          crowdsecLapiScheme: http
          forwardedHeadersTrustedIPs:
            - 10.0.0.0/8
            - 172.16.0.0/12
            - 192.168.1.0/24                                                        
          clientTrustedIPs:
            - 10.0.0.0/8
            - 172.16.0.0/12
            - 192.168.1.0/24

```

But yesterday I had to reboot the server, and after that everything stopped working, containers, virtual machine with local DNS. I think the problem is with Crowdsec, because I thought it banned all my local IP addresses and container IP addresses. When trying to run the command “metrics” I see this

```auto
admin@truenas[~]$ docker exec crowdsec cscli metrics
level=warning msg="while fetching metrics: executing GET request for URL \"http://0.0.0.0:6060/metrics\" failed: Get \"http://0.0.0.0:6060/metrics\": dial tcp 0.0.0.0:6060: connect: connection refused"

```

And the same

```auto
admin@truenas[~]$ docker exec crowdsec cscli alerts list
level=error msg="error while performing request: dial tcp 0.0.0.0:8080: connect: connection refused; 4 retries left"
level=info msg="retrying in 23 seconds (attempt 2 of 5)"
level=error msg="error while performing request: dial tcp 0.0.0.0:8080: connect: connection refused; 3 retries left"
level=info msg="retrying in 34 seconds (attempt 3 of 5)"
level=error msg="error while performing request: dial tcp 0.0.0.0:8080: connect: connection refused; 2 retries left"
level=info msg="retrying in 63 seconds (attempt 4 of 5)"
level=error msg="error while performing request: dial tcp 0.0.0.0:8080: connect: connection refused; 1 retries left"
level=info msg="retrying in 88 seconds (attempt 5 of 5)"

```

---

<div class="post-metadata">

**Author:** ![BlinCT](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/blinct/32/1138_2.png) [@BlinCT](https://discourse.crowdsec.net/u/BlinCT)\
**Post date:** [February 15, 2025, 11:33am UTC](https://discourse.crowdsec.net/t/after-restarting-the-server-everything-on-it-stopped-working/2358/2 "2025-02-15T11:33:18Z")

</div>

I don’t know if this can relate to the problem, but when checking the status of the docker I see this

```auto
Feb 15 09:59:11 truenas dockerd[5597]: time="2025-02-15T09:59:11.040880823+01:00" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:172.16.15.7:43512" dns-server="udp:192.168.1.4:53" error="read udp 172.16.15.7:43512->192.168.1.4:53: i/o timeout" question=";cdn-hub.crowdsec.net.\tIN\t A"
Feb 15 09:59:11 truenas dockerd[5597]: time="2025-02-15T09:59:11.040880803+01:00" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:172.16.15.7:50309" dns-server="udp:192.168.1.4:53" error="read udp 172.16.15.7:50309->192.168.1.4:53: i/o timeout" question=";cdn-hub.crowdsec.net.\tIN\t AA>
Feb 15 09:59:15 truenas dockerd[5597]: time="2025-02-15T09:59:15.042233251+01:00" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:172.16.15.7:60919" dns-server="udp:192.168.1.4:53" error="read udp 172.16.15.7:60919->192.168.1.4:53: i/o timeout" question=";cdn-hub.crowdsec.net.local.\tI>
Feb 15 09:59:15 truenas dockerd[5597]: time="2025-02-15T09:59:15.042336057+01:00" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:172.16.15.7:47921" dns-server="udp:192.168.1.4:53" error="read udp 172.16.15.7:47921->192.168.1.4:53: i/o timeout" question=";cdn-hub.crowdsec.net.local.\tI>
Feb 15 09:59:19 truenas dockerd[5597]: time="2025-02-15T09:59:19.043203717+01:00" level=error msg="[resolver] failed to query external DNS server" client-addr="udp:172.16.15.7:46962" dns-server="udp:192.168.1.4:53" error="read udp 172.16.15.7:46962->192.168.1.4:53: i/o timeout" question=";cdn-hub.crowdsec.net.local.\tI>

```

---

<div class="post-metadata">

**Author:** ![falkheiland](https://dub1.discourse-cdn.com/flex013/user_avatar/discourse.crowdsec.net/falkheiland/32/1162_2.png) [@falkheiland](https://discourse.crowdsec.net/u/falkheiland)\
**Post date:** [March 6, 2025, 6:03pm UTC](https://discourse.crowdsec.net/t/after-restarting-the-server-everything-on-it-stopped-working/2358/3 "2025-03-06T18:03:17Z")

</div>

in my case (crowdsec deployed as a docker compose stack with crowdsec app and docker bouncer) the bouncer installed on the docker host was not started correctly. this lead to restarts of the container.  
after restarting the bouncer everything was ok again.