3 ms·
My problem is usually that I rely heavily on traefik being able to very easily issue certificates simply by having a backend with a hostname present. If I, for
by zaarn 9y ago
My problem is usually that I rely heavily on traefik being able to very easily issue certificates simply by having a backend with a hostname present.
If I, for example, configure my PHP VM to be reachable over "test.example.org" in Traefik, then Traefik will automatically try to issue a certificate for this domain once it detects the config change.
On HAProxy this is not as easy as I need to tell both LE and HAP about the new backend.
If it was integrated, I would only have to tell HAP.
- mschuster91 9y ago> On HAProxy this is not as easy as I need to tell both LE and HAP about the new backend. You only need to tell the certbot container the new domain. The frontend config I gave you actually hits before any host-ACLs which means it will pass all acme-challenge requests on all domains to the certbot container, and certbot will reload haproxy when it's done.
- zaarn 9y agoNo I need to tell both. HAP still needs to know where to route the traffic to and LE needs to know which domains are available.