They even have a full tutorial on it here.
However, if you’re going the self-signed certificate route, consider to make your own mini-CA with root-CA + intermediate CA added in your trust store on every device and all your servicrs behind a reverse proxy. The only thing you need to worry about is the certificate validity !
413j0@lemmy.dbzer0.com 10 months ago
I recommend setting it up with a let’s encrypt cert via tailscale, that way not only you get a proper cert for free without opening your pihole to the internet, but also you get a way to use it when you are not at home, but if you are using a raspberry pi 1 or any other pi from the SD card I recommend using Log2ram in order to preserve the SD card