Daniel Micay on Twitter: "@NicoBerlee https://t.co/bR0o4BnU67 is what we ended up doing. The certbot nginx plugin made it too complicated." / Twitter

This Tweet was deleted by the Tweet author. Learn more

Replying to

Actually you don't need wildcards, try_files and if not exist proxing the .wellknown requests across all your servers works very well.. (and deny already proxied requests in order to prevent loops) its straight forward nginx config, but i have samples if you like

2

Daniel Micay

@DanielMicay

Replying to

@NicoBerlee

github.com/GrapheneOS/rel is what we ended up doing. The certbot nginx plugin made it too complicated.

github.com

use webroot for certbot to support replicas · GrapheneOS/releases.grapheneos.org@f72c83e

12:31 AM · Feb 25, 2021Twitter Web App

Replying to

And .. github.com/GrapheneOS/rel (which i do not need to tell you, leaves something to be desired ) Btw acme.sh + nginx -s reload as a reload command is way simpler + less dependencies than certbot + plugins asks for..

1

Replying to

I don't really want to port github.com/tomwassenberg/ to work with something else though.

1

Show replies

Conversation