> I was disappointed to find they are just creating a self-signed RootCA and issuing certs. Agreed. Not sure why you'd go through the trouble of importing a se

> I was disappointed to find they are just creating a self-signed RootCA and issuing certs. Agreed. Not sure why you'd go through the trouble of importing a self-signed CA when you can provision certs for any internal service with LE. I dont use self-signed and instead have been using LE certs provisioned for internal services for the last couple years. Extra nice to be able to leverage DNS challenge for cert provisioning at home to get around overloading common ports. I know a lot of people mention Caddy but I find Traefik [0] (pronounced "traffic") more flexible. It's routing and middleware configurations are fantastic. Especially when you want to stick a reverse proxy in front of things that are a pain to provision certs into (switches, routers, old embedded web interfaces, etc). [0] https://traefik.io/traefik/ https://traefik.io/traefik/