47
Certificates...ugh (lemmy.zip)
submitted 9 months ago by to c/selfhosted@lemmy.world
19 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 13 points 9 months ago (1 child)

But you're still using Caddy as the sole reverse proxy, don't you? Do you have multiple Caddy instances that require access to a single certificate?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 9 months ago

    Thing is, you may have some devices that should be accessible even if the reverse proxy is unreachable.
    And if you have HSTS and wamt to reach a device under the same local DNS suffix (example: External -> service.example.org, Internal: service.int.examole.org) you can't just bypass the https warning.
    Same for devices reachable over RDP, SSH, etc. etc.

  • permalink
  • fedilink
  • source
  • parent