Ask HN: What's your solution for SSL on internal servers?

Re:Ask HN: What's your solution for SSL on internal servers? by Macha on Wednesday February 09, 2022 @08:38AM (#30272454)

I have local DNS setup to resolve my personal domains to hosts on my home network. They do support wildcard certs, _only_ if you use some form of DNS challenge.

[ Parent | on HN ]

Re:Ask HN: What's your solution for SSL on internal servers? by viovanov on Wednesday February 09, 2022 @08:47AM (#30272535)

I'll try to do this for internal IPs using traefik on Kubernetes. Any pointers?

[ Parent | on HN ]

Re:Ask HN: What's your solution for SSL on internal servers? by Macha on Wednesday February 09, 2022 @08:52AM (#30272586)

I just use unbound where I have a ansible script install it from the arch repos and deploy a handwritten config file with the dns entries. Then it forwards the rest to my DNS provider. I have my router set the address of that unbound host as the DNS server for my devices via DHCP.

I don't use k8s in my home network (though I do have some podman containers), but there's probably something with more k8s integration you can tie into your k8s ingress setup that I'm unaware of.

[ Parent | on HN ]