winterschon

@winterschon@mastodon.bsd.cafe

This is a remote user, information on this page may be incomplete. View at Source ↗

Principal Architect @ Fastly CDN

Flatlined survivor of 'Global Cerebral Ischemia' [oxygen-starved brain-death]

Persistently Patient Patient with a Hypophysis-Cerebri tumour & Supra-Maxxed ICD-10 Skill-Tree

⁨Comment⁩ on ⁨ICANN approves use of .internal domain for your network⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:
@solrize @thehatfox get a free wildcard cert for your domain and use it just like any other. nothing new, nothing different. I have those running on LAN-only hosts behind a firewall and NAT with no port punching or UpNP or any ingress possible.
if you don't want to run a private CA with automated cert distribution (also simple with ansible or a few tens of LOC in shell or python), the LetsEncrypt is trivial and costs nothing -- still requires one to load the cert and key onto a server though, which is 2/3 of the work vs private CA cert management.