Published on Sun Jan 19 2025 14:00:00 GMT+0000 (Coordinated Universal Time) by Brett

Using Lets Encrypt with Cert-Manger locally[WIP]

This is a work in progress and are just notes at the moment

What do I want?

I need to be able to use local certificates to secure my services

I can probably use the DNS01 Challenge from Lets Encrypt
- Pro: You can use this challenge to domain names whose webservers aren’t exposed to the public internet.

This works well since my services are not exposed to the internet, I have a few of them, but they all need different certs

I can probably use the DNS01 Challenge Provider
Since I have CloudFlare as my DNS provider I can use the CloudFlare Issuer
I have a backup domain that I can use for this instead of my main domain
I’ll need to use the staging environment, since production for Let’s Encrypt has strict rate limits
I’ll need cert-manager to rotate at the least 30 days and at the most 80 days so if there is an issue I can figure it out before failure
It looks like I need a middleware like Traefik or nginx to redirect from http to https in the service definitions

Written by Brett