2 ms·
Do you have multiple hosts serving the same domain by any chance? I'm wondering if there's been any progress in finding an easy solution for this use-case.
by emilburzo 10y ago
Do you have multiple hosts serving the same domain by any chance?
I'm wondering if there's been any progress in finding an easy solution for this use-case.
- pilif 10y agoMany if not all of the acme clients out there store the key and certificate as a file. Just copy that to the various machines terminating the SSL connection. In our case, there's a script on the frontend machine running HAProxy that's fetching the certificates and putting them on a shared file system so the backup machine also has access to them. The traffic between frontend host and application servers is unencrypted in our case as it's all one rack under our control. If it wasn't, we'd be using a self-signed certificate for that connection.