This is an automated archive made by the Lemmit Bot.
The original was posted on /r/selfhosted by /u/MyTechAccount90210 on 2023-08-28 18:39:35.
Hi All. So, I understand what is happening with certs. I also understand the value of letsencrypt. What I am having difficulty wrapping my head around is how to get letsencrypt certs on non-accessible domains.
So, on my externally facing proxy, I had LE certs through nginx proxy manager, and they all worked fine. What I am working on now is my INTERNAL proxy, currently also nginx proxy manager - but looking to move sometime soon to something more stable. So I have/own domain.us, and it is used internally for my apps inside my network. None of this stuff is accessible from the outside. So, letsencrypt will never get validation. I had purchased a wildcard certificate last year, and have been using that in nginx, but it will expire soon. Ultimately, I’d like to use automated LE certs, for my domain.us internal proxied sites. Can this be done?
I use DNS validation with my internal nginx proxy and issue a wildcard cert which works for all the non-internet accessible domains.