2 ms·
Just LE a wild card cert and slap it everywhere.
by bombcar 4mo ago
Just LE a wild card cert and slap it everywhere.
- EvanAnderson 4mo agoI get antsy about a private key being in lots of places. You've also got to worry about renewal so you might as well just have "consumer" of the wildcard just provision its own non-wildcard certificate.
- sandermvanvliet 4mo agoI run a reverse proxy that handles the TLS termination for that reason. Services themselves are constrained to the server, bound to listen on 127.0.0.1 only. Key is only available to the reverse proxy.