4 ms·

> I'm still old school but can set this up all using the letsencrypt command line utilities that configure everything for me. Actually Apache recently introduc

> I'm still old school but can set this up all using the letsencrypt command line utilities that configure everything for me. Actually Apache recently introduced mod_md, which allows provisioning certificates from Let's Encrypt directly (or anything else that supports ACME): https://httpd.apache.org/docs/2.4/mod/mod_md.html https://httpd.apache.org/docs/2.4/mod/mod_md.html Because of this, you no longer need external software like certbot for Apache (though it's good software regardless: https://certbot.eff.org/pages/about https://certbot.eff.org/pages/about), so in that regard Apache is a bit more like Caddy (another good web server: https://caddyserver.com/ https://caddyserver.com/), rather than like Nginx. I wrote about it and other configurations of Apache on my blog a while back: https://blog.kronis.dev/tutorials/how-and-why-to-use-apache-httpd-in-2022 https://blog.kronis.dev/tutorials/how-and-why-to-use-apache-... Since, I've actually moved most of my personal workloads from Nginx/Caddy over to Apache, because at my scale the web server isn't the bottleneck and if you disable .htaccess to limit disk I/O it's pretty decent, in addition to lots of different modules. Either way, working a bit more with certificates, even with tools that simplify the process, is a nice way to understand everything a bit better, like running your own CA: https://blog.kronis.dev/tutorials/lets-run-our-own-ca https://blog.kronis.dev/tutorials/lets-run-our-own-ca I still have lots to learn, at least when I want to get pretty particular about mTLS and what some client certificates can or cannot be used for. Of course, any software that actually helps you get things done, is user friendly and has ample (correct) tutorials available is a good option in my book, regardless of what your particular choice ends up being! Let's Encrypt as a whole is an absolute life saver, though! Edit: even if it feels like a looming massive single point of failure with few viable alternatives sometimes.

maxpro 4y ago
Thanks for the mod_md hint, seems to be a perfect fit for me
progmetaldev 4y ago
I have absolutely no issue with Nginx, and still use it here and there. It's just good to see something public about the use of Apache that's current, as I'm more comfortable with its usage and configuration.
- KronisLV 4y ago
  Nginx is also great and will without a doubt stick around for a long time, probably longer than Apache! However there definitely are aspects which can be a little bit annoying: https://blog.kronis.dev/everything%20is%20broken/nginx-configuration-is-broken https://blog.kronis.dev/everything%20is%20broken/nginx-confi... That said, I like its configuration format a bit more than Apache and there's just way less ceremony around it in those cases where it's suitable for any of your projects - you just install it and run it, with any config you might need typically in a single file. With Apache, you find yourself needing to think a little bit more about what modules you have installed and enabled, although there are actually plenty of those out there, for most things you might want to do (e.g. an authentication gateway or something to make it act as a simple web application firewall).

maxpro 4y ago

Thanks for the mod_md hint, seems to be a perfect fit for me

progmetaldev 4y ago

I have absolutely no issue with Nginx, and still use it here and there. It's just good to see something public about the use of Apache that's current, as I'm more comfortable with its usage and configuration.

KronisLV 4y ago
Nginx is also great and will without a doubt stick around for a long time, probably longer than Apache! However there definitely are aspects which can be a little bit annoying: https://blog.kronis.dev/everything%20is%20broken/nginx-configuration-is-broken https://blog.kronis.dev/everything%20is%20broken/nginx-confi... That said, I like its configuration format a bit more than Apache and there's just way less ceremony around it in those cases where it's suitable for any of your projects - you just install it and run it, with any config you might need typically in a single file. With Apache, you find yourself needing to think a little bit more about what modules you have installed and enabled, although there are actually plenty of those out there, for most things you might want to do (e.g. an authentication gateway or something to make it act as a simple web application firewall).