I also need to work out how to do automatic certificate renewal and if that’s even worth doing
This is what certbot is for. For example, with nginx, you just set up the webserver to be reachable via your domain.
You then install and run certbot, and it will aquire, install and configure, and then auto-renew a certificate. All with just one command.
With Nextcloud specifically I also don’t like the fact that you can’t change the domain after the initial setup
Yes you can?
I’ve done it thrice now.
ragica@lemmy.ml 7 hours ago
Use Caddy for reverse proxy. It’s magic. Just put in config the subdomain/domain and localhost port to point to, it will fetch and configure and keep certificates up to date with zero effort. You’ll forget certificates exist. It just works.