3 ms·
Use the DNS challenge: no open ports or listeners on your machine, just set a DNS record.
by mholt 10y ago
Use the DNS challenge: no open ports or listeners on your machine, just set a DNS record.
- rlpb 10y agoNo, it's the outbound API connection that is the problem. The server listens on HTTPS from the world, so having that listening inbound wasn't a problem.
- ygjb-dupe 10y agoRight, so you can run the dns01 challenge on a separate service, up to and including running it in jenkins to automatically renew and push your certs, and kick the nginx server. I should document how my setup works and put it up somewhere...