Nginx introduces native support for ACME protocol
blog.nginx.org
Nginx introduces native support for ACME protocol
1–10 of 308 posts
Re: Nginx introduces native support for ACME protocol
#2For now I will stick to what works (nginx + certbot), but I will give this a try. Anyone tried it?
Caddy sounds interesting too, but I am afraid of switching because what I have works properly. :/
Re: Nginx introduces native support for ACME protocol
#3This is pretty big. Caddy had this forever but not everybody wants to use caddy. It'll probably eat into the user share of software like Traefik.
Re: Nginx introduces native support for ACME protocol
#4There’s a section on renewals but no description of how it works. Is there a background thread/process? Or is it request-driven? If request-driven, what about some hostname that’s (somehow) not seen traffic in >90 days?
Re: Nginx introduces native support for ACME protocol
#5certbot has an plugin for nginx, so I'm not sure why people think is was hard to use LetsEncrypt with nginx.
Re: Nginx introduces native support for ACME protocol
#6It looks like this isn't included by default with the base nginx, but requires you to install it as a separate module. Or am I wrong?
Re: Nginx introduces native support for ACME protocol
#7For now I will stick to what works (nginx + certbot), but I will give this a try. Anyone tried it? Caddy sounds interesting too, but I am afraid of switching because what I have works properly. :/
I like it!!! I am using Apache mod_md on Debian for personal project. That is working fine but when setting up a new site it somehow required two Apache restarts which is not super smooth
Re: Nginx introduces native support for ACME protocol
#8This is pretty big. Caddy had this forever but not everybody wants to use caddy. It'll probably eat into the user share of software like Traefik.
What I really like about Caddy is their better syntax. I actually use nginx (via nginx proxy manager) and Traefik but recently I did one project with Caddy and found it very nice. I might get the time to change my selfhosted setup to use Caddy in the future but probably will go with something like pangolin [1] because it provides alternative to cloudflare tunnels too.
Re: Nginx introduces native support for ACME protocol
#9> The current preview implementation supports HTTP-01 challenges to verify the client’s domain ownership.
DNS-01 is probably the most impactful for users of nginx that isn't public facing (i.e., via Nginx Proxy Manager). I really want to see DNS-01 land! I've always felt that it's also one of the cleanest because it's just updating some records and doesn't need to be directly tethered to what you're hosting.
Re: Nginx introduces native support for ACME protocol
#10Oh this is exciting! Caddy's support is very convenient and it does a lot of other stuff right out of the box which is great.
One thing keeping me from switching to Caddy in my places is nginx's rate limiting and geo module.