undefined | Better HN

0 pointsefortis1y ago0 comments

I use acme.sh with DNS challenges on an external machine. Then I push up (rsync) the certs and reload Nginx.

0 comments

3 comments · 1 top-level

martinbaun1y ago· 2 in thread

Thanks eFortis? I guess this mainly for security and separation of concerns?

efortisOP1y ago

Yes, the certificate renewal and the server are more hardened this way.

Cool! Do you do other things to hardend the servers like Knockerd?

j / k navigate · click thread line to collapse