Open post maxolotl @mxl@is.nota.live · 7mo ago Replying to @rysiek@mstdn.social @mxl@is.nota.live @snow@beasts.life but they require write-enabled API on the part of the DNS hosting, which is rarely a given. @rysiek@mstdn.social Fair, and even if they do allow writes each provider needs bespoke support from the ACME client.
Open post maxolotl @mxl@is.nota.live · 7mo ago Replying to @rysiek@mstdn.social @snow@beasts.life I might switch from HTTP to DNS-PERSIST-01 as that makes it possible to issue wildcard certs. Plus, it does not require any HTTP endpoint to be exposed. Which means it is perfect for services on the intranet, not exposed to the Internet, for example. @rysiek@mstdn.social @snow@beasts.life I'm curious, what's prevented you from using DNS-01 challenges? Those also don't require any exposed HTTP endpoint.