3 ms·
Giving an Internet-connected program autonomous write-access to system-critical filesystems is not considered good practice in production environments. Much be
by dingaling 6y ago
Giving an Internet-connected program autonomous write-access to system-critical filesystems is not considered good practice in production environments.
Much better to have a separate central cert management system that handles renewals and pushes the certs outwards to the DMZ systems.
- AlfeG 6y agoThis is true for enterprise, but for small business Caddy or Traefik is totally fine.
- mholt 6y agoCaddy is good for enterprise use too because of its configurable, pluggable storage backends (doesn't have to be a file system). You can achieve the permission segmenting your company requires. You can also use it as a certificate manager independently of a web server if you want.