Doesn’t the built-in tooling only really provide an advantage if you’re using the http or sni challenges?
If you want to use wildcard certs via the dns-01 challenge (in my case via rfc2136), the entire challenge runs out of band anyway, so there’s no difference in reliability. (At least in my tests so far, though support for the RFC 2136 standard in caddy and/or plugins is quite poor afaict)
How was the Nix experience? Did you try just nix or also NixOS?
Re:NGINX Proxy Manager
by francislavoie on Monday May 23, 2022 @03:53PM
(#31484070)
I think you replied to the wrong comment
No, I'd like to know why he called it 'less reliable'.
He must have used it on nix(linux) or nix(darwin) or NixOS..
Re:NGINX Proxy Manager
by francislavoie on Monday May 23, 2022 @04:31PM
(#31484451)
The comment wasn't about Nix, it was about ACME clients paired with Nginx being less reliable than having the ACME client built into your server (e.g. how Caddy does it). The comment was by Matt Holt, the author of Caddy.
Correct. You need separate, less reliable tooling to use ACME with nginx.