3 ms·
Check out Caddy Server. It was only a few days ago when I was still managing my own certs and renewing them with a Cron job. Caddy now acts as my proxy for my v
by polishdude20 6y ago
Check out Caddy Server. It was only a few days ago when I was still managing my own certs and renewing them with a Cron job. Caddy now acts as my proxy for my various web domains and it handles certs automatically. Like literally you fill out a few lines in the config called a Caddy file and you do Caddy run and it gets the certs itself. And as long as it's running, it renews them automatically.
- dingaling 6y agoGiving an Internet-connected program autonomous write-access to system-critical filesystems is not considered good practice in production environments. Much better to have a separate central cert management system that handles renewals and pushes the certs outwards to the DMZ systems.
- AlfeG 6y agoThis is true for enterprise, but for small business Caddy or Traefik is totally fine.
- mholt 6y agoCaddy is good for enterprise use too because of its configurable, pluggable storage backends (doesn't have to be a file system). You can achieve the permission segmenting your company requires. You can also use it as a certificate manager independently of a web server if you want.