3 ms·
I was just looking into this kind of thing for a training lab we stood up and maybe you could have some advice/clarification to offer me from working on this. W
by zamadatix 2y ago
I was just looking into this kind of thing for a training lab we stood up and maybe you could have some advice/clarification to offer me from working on this. We have a locally hosted external DNS which wildcards everything not otherwise specified to an authenticating web proxy (currently caddy and locally hosted coredns). It's not clear what the "lazy" way to get a wildcard DNS cert via ACME DNS challenge going is with this kind of set up. To me it feels like Caddy is missing a built in functionality to act as the delegated ACME DNS responder and it's not clear which option is the best way to get Caddy (normally very automatic) to reload after it handles the requests.
Not particularly bound to Caddy or Coredns on the external side but it's what we're using for the internal as well.
- 8organicbits 2y agoAre you trying to get the TLS cert for domains you own, or are you getting certs for all other domains? For the former, the Caddy ACME DNS plugin should work. For the latter, I think mitmproxy or similar would handle the on demand TLS cert creation. There's commercial intercept proxies as well, but I have no experience with them.
- zamadatix 2y agoJust a *.ourpubliclabdomain.com cert. I'll look into ACME DNS + the Caddy plugin. Thanks!