4 ms·
Absolutely. I use a wildcard for this and doing a cert for each sub would just be a lot of hassle and potential for things to go wrong with no security benefit.
by calafrax 9y ago
Absolutely. I use a wildcard for this and doing a cert for each sub would just be a lot of hassle and potential for things to go wrong with no security benefit.
- bryanlarsen 9y agoI use kubernetes-lego for this and it's all automatic, zero hassle.
- calafrax 9y agoThat is a good solution for kube thanks for the reference. My situation is a bit different: hosting a bunch of subs on the same servers. With one wildcard I have one server conf with one cert and use the hostname to rewrite each request to the correct directory. If I did a cert for each sub the nginx conf would need 1000's of server config blocks each with its own cert. I haven't tested, so maybe nginx would handle this just fine, but it is easier to just go with a single wildcard and not worry about it. As far as I can tell there is no security advantage to having multiple certs instead of one wildcard since I would have all the certs on the same server anyway but if anyone knows of any I would be happy to hear.