Comment on Decreasing Certificate Lifetimes to 45 Days

• cron@feddit.org ⁨7⁩ ⁨hours⁩ ago

  The only disadvantage I see is that all my personal subdomains (e.g. immich.name.com and jellyfin) are forever stored in a public location. I wouldn’t call it a privacy nightmare, yet it isn’t optimal.

  There are two workarounds:

  • do not use public certificates
  • use wildcard certificates only

  source

  • Burnoutdv@feddit.org ⁨5⁩ ⁨hours⁩ ago

    But how to automate wildcard certificate generation? That requires a change of the txt record and namecheap for instance got no mechanism for that to automatically happen on cert bot action

    source

    • cron@feddit.org ⁨4⁩ ⁨hours⁩ ago

      There are some nameserver providers that have an API.

      When you register a domain, you can choose which nameserver you like. There are nameservers that work with certbot, choose one that does.

      source