• 0 Posts
  • 17 Comments
Joined 1 year ago
cake
Cake day: June 29th, 2023

help-circle






  • vector_zero@lemmy.worldtoSelfhosted@lemmy.worldLet's encrypt?
    link
    fedilink
    English
    arrow-up
    2
    ·
    11 months ago

    I’m actually almost completely unfamiliar with Nginx, short of a few hours of tinkering. NginxProxyManager is a direct competitor to Caddy, with a graphical interface, SSL cert creation and auto-renew, etc. I’m not going to say to switch from Caddy, since there’s probably no major benefit, but it’s much nicer than trying to figure out Nginx reverse proxies by hand.




  • vector_zero@lemmy.worldtoSelfhosted@lemmy.worldLet's encrypt?
    link
    fedilink
    English
    arrow-up
    2
    ·
    11 months ago

    I’m going to cast another vote for a reverse proxy, such as NginxProxyManager. It’s really easy to set everything up, and they’re usually very easy to run in Docker/Podman.

    One thing to note: if you end up with a domain with mandatory HSTS, you’ll have to use DNS-based certificate generation rather than HTTP based, since unencrypted HTTP is blocked (chicken/egg problem to get HTTPS working). It’s not hard, but you have to be aware of that limitation.