4 ms·
> Automatic ACME is not a feature in nginx right? Correct. You need separate, less reliable tooling to use ACME with nginx.
by mholt 4y ago
> Automatic ACME is not a feature in nginx right?
Correct. You need separate, less reliable tooling to use ACME with nginx.
- jphsnsir 4y agoHow was the Nix experience? Did you try just nix or also NixOS?
- francislavoie 4y agoI think you replied to the wrong comment
- jphsnsir 4y agoNo, I'd like to know why he called it 'less reliable'. He must have used it on nix(linux) or nix(darwin) or NixOS..
- francislavoie 4y agoThe comment wasn't about Nix, it was about ACME clients paired with Nginx being less reliable than having the ACME client built into your server (e.g. how Caddy does it). The comment was by Matt Holt, the author of Caddy.
- kuschku 4y agoDoesn’t the built-in tooling only really provide an advantage if you’re using the http or sni challenges? If you want to use wildcard certs via the dns-01 challenge (in my case via rfc2136), the entire challenge runs out of band anyway, so there’s no difference in reliability. (At least in my tests so far, though support for the RFC 2136 standard in caddy and/or plugins is quite poor afaict)