Hello, I wan’t to ask if anyone knows of a good alternative for certbot for acquiring ssl certificates for nginx.

Certbot isn’t good anymore for me since I started using crowdsec with nginx bouncer that uses lua block’s inside nginx config that cerbot can’t parse, making it not work anymore.

I use nginx because it’s the one I know the best and for my use case work’s the best. ( Hosting both program’s directly on metal and docker container’s )

  • EddyBot@feddit.deEnglish
    11·
    10 months ago

    if you are open to learn something new: Caddy webserver has a dead simple config, fetches tls certs by default for you and works with crowdsec too

    • CronyAkatsuki@lemmy.cronyakatsuki.xyzOPEnglish
      1·
      10 months ago

      I’m open to using sothing like caddy or traefic, but my issue is I have a mix of packages hosted directly on system and in docker container’s and as such need to proxy them all.

      That’s why I’m not using caddy or traefic.

      Edit: rn my mix consists of about 16 diff containeraized stuff and another 4-5 not containerized stuff.

      Edit2: Just now realized that they can be used on the host system’s also. Would you recommend traefic or caddy?

      • joao@aussie.zoneEnglish
        2·
        10 months ago

        If all was containerised, I’d recommend traefik for its impeccable container integration, but for a mix of bare metal and container services I’d go with Caddy.

      • EddyBot@feddit.deEnglish
        2·
        10 months ago

        I’m using Caddy (sometimes in a container or most of the time as system package) as reverse proxy mostly for containers
        I try to minimize non-container services but they work well with Caddy too

        Traefik is a tad more complex (still nowhere near Apache2 levels though) but scales more easily espcially if you only run containers and start/stop them programatically