Comment on If I use Caddy for reverse-proxying into another local machine... is my local connection not HTTPS?
johannes@lemmy.jhjacobs.nl 1 week ago
If you want everything on your local lan to have SSL, look into Step CA. Its not completely beginners friendly, but if you’re serious about selfhosting you will manage to set it up :) Caddy works with it also, and their examples are very helpful.
N0x0n@lemmy.ml 1 week ago
Or simply create your rootCA, IntermediateCA, keys and certifictes with openSSL.
Neither of those are begginer friendly but openSSL is probably a bit easier to get started. There’s a nice book with openSSL (if you are interested I migh look how it’s called) and the last chapter is all about how to create your mini-CA and everthing else to serve your proxy with valid certificates for your homelab.
johannes@lemmy.jhjacobs.nl 1 week ago
The reason i chose Step CA over openSSL is because with step CA you can automate certificate renewal without any manual intervention. I don’t know how that would work with openSSL except some heavy scripting?
N0x0n@lemmy.ml 1 week ago
Yeah thats correct !
I Wouldn’t say heavy though (maybe I see it that way because I got a bit better with bash and the like :p) because you can make use of CLR to revoke your certificates and renew them very easily with your intermediate and ready to use config files.
But yeah, there isn’t any automated way to manage certificates like Smallstep does :)
johannes@lemmy.jhjacobs.nl 1 week ago
You mentioned a book though… Now i’m curious ;-)