4 ms·

you can use lets encrypt certificates on your lan using DNS verification

• arpa 5y ago
  effort / gain ratio is crap tho. Especially assuming IPv4 and reasonable firewalling.
  • Zekio 5y ago
    effort is basically none, aside from getting an API key from Cloudflare(could be any provider really) and then downloading the version of Caddy that includes supports Cloudflare DNS verification in terms of gains you get the benefit of easy to remember names, and you don't share everything in plaintext which is becoming more and more important as we get more and more devices on our LANs
    • defanor 5y ago
      FWIW, the setup can be simpler and more portable without a specialized HTTP server and with a standardized protocol (RFC 2136): just certbot and its python3-certbot-dns-rfc2136. Edit: certbot has plugins for a bunch of custom APIs too.
• tedunangst 5y ago
  It's may be simpler to use split horizon DNS and http verification outside the lan instead of dealing with DNS challenges.