Unable to connect to your Outline Server

Hi Today, I ran out of space on my Outline VPS because the outline container got too big. I decided to do a bit of cleaning and set up Outline from scratch: I removed both outline/watchtower containers and removed /opt/outline dir. The install went fine: ``` bash -c "$(wget -qO- https://raw.githubusercontent.com/Jigsaw-Code/outline-apps/master/server_manager/install_scripts/install_server.sh) > Verifying that Docker is installed .......... OK > Verifying that Docker daemon is running ..... OK > Setting PUBLIC_HOSTNAME to external IP ...... OK > Creating persistent state dir ............... OK > Generating secret key ....................... OK > Generating TLS certificate .................. OK > Generating SHA-256 certificate fingerprint .. OK > Writing config .............................. OK > Starting Shadowbox .......................... OK > Starting Watchtower ......................... OK > Waiting for Outline server to be healthy .... OK > Creating first user ......................... OK > Adding API URL to config .................... OK > Checking host firewall ...................... OK CONGRATULATIONS! Your Outline server is up and running. To manage your Outline server, please copy the following line (including curly brackets) into Step 2 of the Outline Manager interface: {"apiUrl":"<my_url>","certSha256":"<my_hash>"} If you have connection problems, it may be that your router or cloud provider blocks inbound connections, even though your machine seems to allow them. Make sure to open the following ports on your firewall, router or cloud provider: - Management port 40982, for TCP - Access key port 3737, for TCP and UDP ``` Containers are running: ``` > docker ps CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES 95195d487be0 containrrr/watchtower "/watchtower --clean…" 17 minutes ago Up 17 minutes (healthy) 8080/tcp watchtower 49236a351d4a quay.io/outline/shadowbox:stable "docker-entrypoint.s…" 17 minutes ago Up 17 minutes ``` I don't see anything bad in container logs: ``` I2025-07-28T18:20:41.969Z 12 main.js:2] Manager listening at https://[::]:40982/<my_hash> I2025-07-28T18:20:41.982Z 12 main.js:2] ======== Starting Outline Shadowsocks Service ======== I2025-07-28T18:20:41.983Z 12 main.js:2] /opt/outline-server/bin/outline-ss-server "-config" "/opt/outline/persisted-state/outline-ss-server/config.yml" "-metrics" "127.0.0.1:9092" "-ip_country_db" "/var/lib/libmaxminddb/ip-country.mmdb" "-ip_asn_db" "/var/lib/libmaxminddb/ip-asn.mmdb" "--replay_history=10000" Jul 28 18:20:41.989 INF Prometheus metrics available at http://127.0.0.1:9092/metrics. Jul 28 18:20:41.989 INF Using IP-Country database. db=/var/lib/libmaxminddb/ip-country.mmdb Jul 28 18:20:41.990 INF Using IP-ASN database. db=/var/lib/libmaxminddb/ip-asn.mmdb Jul 28 18:20:41.991 INF Loaded config. access_keys=0 listeners=0 Jul 28 18:20:42.457 INF SIGHUP received. Loading config. config=/opt/outline/persisted-state/outline-ss-server/config.yml Jul 28 18:20:42.457 INF TCP service started. address=[::]:3737 Jul 28 18:20:42.457 INF UDP service started. address=[::]:3737 Jul 28 18:20:42.457 INF Loaded config. access_keys=1 listeners=2 Jul 28 18:20:42.457 INF Stopping running config. Jul 28 18:20:42.457 INF Stopped all listeners for running config. ``` But the Outline manager keeps yelling at me: <img width="1068" height="437" alt="Image" src="https://github.com/user-attachments/assets/dd4e137d-410d-4e2e-9c23-74d189024d5a" /> There were no firewall changes (I have regular iptables on my Ubuntu 18.04 with no additional setup). I've checked the port is open, though: ``` > nc -zv <my_vps_ip> 40982 Connection to <my_vps_ip> 40982 port [tcp/*] succeeded! ``` What confuses me is that local (from Outline VPS VM) curl responds with: ``` > curl https://0:40982 -k {"code":"ResourceNotFound","message":"/ does not exist"} ``` where remote (my PC with Outline Manager) is stuck on TLS: ``` > curl https://<my_vps_ip>:40982 -v -k * Trying <my_vps_ip>:40982... * Connected to <my_vps_ip> (<my_vps_ip>) port 40982 * ALPN: curl offers h2,http/1.1 * TLSv1.3 (OUT), TLS handshake, Client hello (1): <stuck here> ``` I've also checked tcpdump at the moment the manager tries to connect, but nothing helpful: ``` > tcpdump port 40982 listening on eth0, link-type EN10MB (Ethernet), capture size 262144 bytes 18:47:07.589396 IP <my_home_ip>.52338 > VPS.40982: Flags [S], seq 1678473210, win 65535, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0 18:47:07.589560 IP VPS.40982 > <my_home_ip>.52338: Flags [S.], seq 3110835641, ack 1678473211, win 64240, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0 18:47:07.592785 IP <my_home_ip>.52339 > VPS.40982: Flags [S], seq 4085363337, win 65535, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0 18:47:07.592838 IP VPS.40982 > <my_home_ip>.52339: Flags [S.], seq 3779138136, ack 4085363338, win 64240, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0 18:47:07.628113 IP <my_home_ip>.52338 > VPS.40982: Flags [.], ack 1, win 255, length 0 18:47:07.631072 IP <my_home_ip>.52339 > VPS.40982: Flags [.], ack 1, win 255, length 0 18:47:19.948926 IP VPS.40982 > <my_home_ip>.45101: Flags [F.], seq 177801150, ack 2353892591, win 510, options [nop,nop,TS val 3237904709 ecr 3775634856], length 0 ``` What am I missing?