3 ms·
Yes, because if you web server publicly reachable, letencrypt can be automated easily. And there is plenty of letsencrypt software that does fully automates thi
by phicoh 5y ago
Yes, because if you web server publicly reachable, letencrypt can be automated easily. And there is plenty of letsencrypt software that does fully automates this.
A public web server is the easy part if you want to do letsencrypt.
- vetinari 5y agoLetsencrypt is easy, if you are running generic Linux distribution and can easily install whatever you want. But you might run a device that already comes with software, and letsencrypt support is either limited (example: Synology; their implementation allows only http-01 challenge so if you need dns-01, tough luck. Even wildcards are a new feature) or non-existent (example: Ubiquiti, and their cloud keys (administration UI, guest portal) or routers (Radius/WPA Enterprise needs TLS cert too)).
- throw0101a 5y agodns-01 is possible on Synology, but you need to SSH in: * https://github.com/acmesh-official/acme.sh/wiki/Synology-NAS-Guide https://github.com/acmesh-official/acme.sh/wiki/Synology-NAS... * https://lippertmarkus.com/2020/03/14/synology-le-dns-auto-renew/ https://lippertmarkus.com/2020/03/14/synology-le-dns-auto-re... * http://www.thedreaming.org/2020/11/18/synology-lets-encrypt/ http://www.thedreaming.org/2020/11/18/synology-lets-encrypt/ It's possible as long as your ACME client has hook scripts, and your DNS provider has an API: * https://github.com/AnalogJ/lexicon https://github.com/AnalogJ/lexicon
- andrewaylett 5y agoIt's unofficial, but https://github.com/kchristensen/udm-le https://github.com/kchristensen/udm-le lets you provision LetsEncrypt certificates for Ubiquiti kit.