this post was submitted on 19 Jun 2023
19 points (100.0% liked)

Selfhosted

39257 readers
202 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

  1. Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.

  2. No spam posting.

  3. Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.

  4. Don't duplicate the full text of your blog or github here. Just post the link for folks to click.

  5. Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).

  6. No trolling.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 1 points 1 year ago (2 children)

There's no question in my mind, letsencrypt is a major boon the the entire Internet.

[–] [email protected] 2 points 1 year ago (2 children)

Hard to believe you used to have to pay for a TLS certificate. I use Let's Encrypt with cert-manager on my kubernetes cluster and it still amazes me how SSL just happens. Even just using certbot makes the job extremely simple.

[–] [email protected] 1 points 1 year ago (1 children)

For cert-manager to work you need to have the ingress controller port (or I guess another port) exposed publicly? Or it supports DNS verification? I thought about doing this, but I am essentially having my cluster fully in a private network which I connect with wireguard from outside, but maybe I should reconsider?

I am keen to know a little bit more about your setup

[–] [email protected] 1 points 1 year ago

I am using cloudflare DNS, which cert-manager requires an API key to edit the DNS entries. Documentation on this can be found here. It seems to support a number of DNS APIs, you can view those here.

[–] [email protected] 1 points 1 year ago

There even are still some (shitty) webhosts that require payment for a TLS certificate, because they refuse to support letsencrypt.

[–] [email protected] 1 points 1 year ago

Every website I’ve ever set up has used letsencrypt, not sure where small business pages would be without it.