5 ms·

What took them so long? Honest question. I'd expect nginx to have this years ago. Is that so hard to implement for some reason?

aaronax 1y ago
Slow adoption of ACME by corporate customers that pay the bills. Must be a bigger effort than one would initially think, too.
preisschild 1y ago
What does this offer to you vs using a tool such as certbot/cert-manager, and then just referencing the path in nginx?
- aargh_aargh 1y ago
  One less program to install, configure, upgrade, watch vulnerabilities in, monitor.
  - benwilber1 1y ago
    All of those things also apply to this module since it's an extra module that you have to install separate. It's not included with the nginx base distribution. You have to configure it specifically, you have to monitor it. You have to upgrade and watch for vulnerabilities.
- petre 1y ago
  Not needing a python interprter and setting up cron jobs? The sole reason for using Caddy really, because it's just install and forget. I never had an expired certificate with it. I don't want to mess with an entirely different webserver config either after having fully configured my nginx instances. Too bad they wrote it in rust instead of C, now I need another compiler to build it. Minor nuisance. Hopefully it will get packaged.
lysace 1y ago
Nginx is now owned by F5. Big, expensive and amazingly slow in terms of development. Related notice: I really enjoy using haproxy for load balancing.
- senko 1y ago
  Looks like haproxy also doesn't support it natively. (unless I'm googlin' it wrong - all info points to using with acme.sh)
- jsheard 1y ago
  See also: nginx's HTTP/3 support still being experimental, when pretty much every other server besides Apache shipped it years ago.
  - deleted 1y ago
    [deleted]
  - everfrustrated 1y ago
    Yes tho the odds are anybody wanting http3 likely also using a cdn. There aren't too many cdns which support http3 back to origin. Heck most of them don't even support ipv6-only origins.
- Graphon1 1y ago
  No love for caddyserver?
  - deleted 1y ago
    [deleted]
  - mholt 1y ago
    There was quite a bit already, about a month ago: https://news.ycombinator.com/item?id=44889941 https://news.ycombinator.com/item?id=44889941

aaronax 1y ago

Slow adoption of ACME by corporate customers that pay the bills. Must be a bigger effort than one would initially think, too.

preisschild 1y ago

What does this offer to you vs using a tool such as certbot/cert-manager, and then just referencing the path in nginx?

aargh_aargh 1y ago
One less program to install, configure, upgrade, watch vulnerabilities in, monitor.
- benwilber1 1y ago
  All of those things also apply to this module since it's an extra module that you have to install separate. It's not included with the nginx base distribution. You have to configure it specifically, you have to monitor it. You have to upgrade and watch for vulnerabilities.
petre 1y ago
Not needing a python interprter and setting up cron jobs? The sole reason for using Caddy really, because it's just install and forget. I never had an expired certificate with it. I don't want to mess with an entirely different webserver config either after having fully configured my nginx instances. Too bad they wrote it in rust instead of C, now I need another compiler to build it. Minor nuisance. Hopefully it will get packaged.

lysace 1y ago

Nginx is now owned by F5. Big, expensive and amazingly slow in terms of development. Related notice: I really enjoy using haproxy for load balancing.

senko 1y ago
Looks like haproxy also doesn't support it natively. (unless I'm googlin' it wrong - all info points to using with acme.sh)
jsheard 1y ago
See also: nginx's HTTP/3 support still being experimental, when pretty much every other server besides Apache shipped it years ago.
- deleted 1y ago
  [deleted]
- everfrustrated 1y ago
  Yes tho the odds are anybody wanting http3 likely also using a cdn. There aren't too many cdns which support http3 back to origin. Heck most of them don't even support ipv6-only origins.
Graphon1 1y ago
No love for caddyserver?
- deleted 1y ago
  [deleted]
- mholt 1y ago
  There was quite a bit already, about a month ago: https://news.ycombinator.com/item?id=44889941 https://news.ycombinator.com/item?id=44889941