3 ms·

I wanted to try it out just now but hit a roadblock immediately - it cannot automatically obtain and maintain TLS certificates. You have to use an external clie

I wanted to try it out just now but hit a roadblock immediately - it cannot automatically obtain and maintain TLS certificates. You have to use an external client (e.g. acme.sh), set up a cron to check/renew them, and poke HAProxy to reload them if necessary. I'm way past doing this in 2023. https://www.haproxy.com/blog/haproxy-and-let-s-encrypt https://www.haproxy.com/blog/haproxy-and-let-s-encrypt https://github.com/haproxy/haproxy/issues/1864 https://github.com/haproxy/haproxy/issues/1864

nickramirez 3y ago
If getting Let's Encrypt to work with HAProxy is your only struggle, you'll soon overcome it and be loving HAProxy. And there are multiple ways to set up Let's Encrypt, if you don't want to use acme.sh. For example, you could use certbot. There are blog posts that cover that pretty well.
superq 3y ago
you may wish to use certbot instead: https://github.com/acmesh-official/acme.sh/issues/4659 https://github.com/acmesh-official/acme.sh/issues/4659