Comment on Internal domain and reverse proxy

• philpo@feddit.org ⁨1⁩ ⁨month⁩ ago

  Sorry, then proceed with LE.

  source

  • motruck@lemmy.zip ⁨1⁩ ⁨month⁩ ago

    What advantages do you think the paid cert has over letsencrypt?

    source

    • philpo@feddit.org ⁨1⁩ ⁨month⁩ ago

      ZeroSSL has unpaid plans (for non wildcards) that have a few advantages that LE doesn’t:

      • No Ratelimits,
      • A WebDashboard
      • More ways to validate
      • They have a RestAPI

      And, first and foremost, they are European and it’s always good tk have an alternative ready.

      But as said before, I totally missed the wildcard issue, as I haven’t touched these for a long time and recently had more to do with my public services (which get a ACME single domain cert via zeroSSL)

      source
• TimeWalker@piefed.foxden.party ⁨1⁩ ⁨month⁩ ago

  As I understood, the one that you see on the page is something distinct. They have a different service on their ACME page. If you’re using a script like acme.sh or using the ACMEIssuer in Caddy, then you can get a free wildcard certificate over that. But I assume it’s losing the advantages that have been mentioned like the web dashboard, etc.

  source

  • hietsu@sopuli.xyz ⁨1⁩ ⁨month⁩ ago

    Good to know! *-cert is definitely something I’d need to setup in my self host setup, though a little complex as my (free) domain provider does not let me edit TXT records for DNS-01.

    source