Re:AlwaysOnSSL – A free and automated CA
by icebraining on Monday March 12, 2018 @08:41AM
(#16567759)
Using nginx and a let's encrypt client on the host, the certificates are only generated and kept inside the machine itself. That's safer than baking them into the Docker image, which will be copied around.
to setup the nginx on my host, i would still have to store the certificates somewhere right.
Docker is not what is making this thing complicated.