4 ms·
There is an option to run it in a different port which will allow you to reverse proxy to it. --standalone-supported-challenges http-01 --http-01-port 9999 Wi
by pilif 11y ago
There is an option to run it in a different port which will allow you to reverse proxy to it.
--standalone-supported-challenges http-01 --http-01-port 9999
Will make it listen on port 9999. Their server will only connect to the official ports of course, so you need to reverse proxy
- ultramancool 11y agoNice, I really like that idea. Any information on what paths I'd need to reverse proxy to it?
- merlincorey 11y agoIn NginX you would need the following location (with different contents): location /.well-known/acme-challenge/ { alias /var/www/challenges/; try_files $uri =404; } Snippet from https://github.com/diafygi/acme-tiny https://github.com/diafygi/acme-tiny documentation.
- FireBeyond 11y agoI can understand some of the need for this. On the other hand you could make it trust all privileged ports, which implies root access - but this is a separate concern for other users.