Ask HN: Easiest and least painful way of adding Lets Encrypt?

8 pointsturshija9y ago8 comments

I have a Debian box (LAMP) with some legacy PHP sites where I want to put Lets Encrypt SSL. What is the most painful way of doing that without disturbing any site that's currently running on it ? Is there any tool or script which does most of the job so that I don't have to fiddle a lot with Apache/PHP config and risk to break something ? Thanks

8 comments

patmcc9y ago

https://caddyserver.com/ - Caddy works pretty nicely, and you should be able to use it as a reverse proxy in front of apache.

codegeek9y ago

Use this to get exact instructions for your setup:

https://certbot.eff.org/

stephenr9y ago

Personally I use haproxy to forward all LE related requests to certbot in standalone mode.

My email is in my profile if you want to try this and need some help.

hackerboos9y ago

You can use the certbot on your local machine and setup a txt record on the DNS of the domain.

Let's Encrypt will verify ownership against that text entry.

Emc2fma9y ago

Warning for anyone trying to add Lets Encrypt to GCP - absolute nightmare. Would not recommend.

marcc9y ago

Are you willing to share some details about the challenges you had?

Emc2fma9y ago

Currently, there isn't any built-in support with AppEngine. The steps you have to go through to ssh in and verify ownership is just a hassle.

kim09y ago

kube-lego for kubernetes is just awesome!

j / k navigate · click thread line to collapse

Ask HN: Easiest and least painful way of adding Lets Encrypt?

8 pointsturshija9y ago8 comments

8 comments

patmcc9y ago

https://caddyserver.com/ - Caddy works pretty nicely, and you should be able to use it as a reverse proxy in front of apache.

codegeek9y ago

Use this to get exact instructions for your setup:

https://certbot.eff.org/

stephenr9y ago

Personally I use haproxy to forward all LE related requests to certbot in standalone mode.

My email is in my profile if you want to try this and need some help.

hackerboos9y ago

You can use the certbot on your local machine and setup a txt record on the DNS of the domain.

Let's Encrypt will verify ownership against that text entry.

Emc2fma9y ago

Warning for anyone trying to add Lets Encrypt to GCP - absolute nightmare. Would not recommend.

marcc9y ago

Are you willing to share some details about the challenges you had?

Emc2fma9y ago

Currently, there isn't any built-in support with AppEngine. The steps you have to go through to ssh in and verify ownership is just a hassle.

kim09y ago

kube-lego for kubernetes is just awesome!

j / k navigate · click thread line to collapse