Disable certificate generation for a specific domain

[sowinski]

Hi,

I have the following labels in my docker compose:

labels:
  caddy: "caddy.example.com, www.example.com, www.example.se, www.example.pl, www.example.it"
  caddy.log:
  caddy.reverse_proxy: "{{upstreams 8000}}"

I have infront of www.example.it a CDN placed. The CDN is creating the certificate for me. Caddy can not create a certifcate for www.exmaple.it anymore, because the DNS entries are missing.

So I want to disable the certificate generation for www.example.it but keep the certificate generation for the other domains.

How can I do this?

[francislavoie]

You would need separate site blocks to change the config for that domain.

[sowinski]

labels:
  caddy: "caddy.example.com, www.example.com, www.example.se, www.example.pl"
  caddy.log:
  caddy.reverse_proxy: "{{upstreams 8000}}"
  caddy_1: "www.example.it"
  caddy_1.reverse_proxy: "{{upstreams 8000}}"
  caddy_1.tls: "internal"

Do you mean like that? Is this the way how to stop creating a SSL certificate for www.example.it but still listening for incoming connections from www.example.it?

[polarathene]

Is this the way how to stop creating a SSL certificate for www.example.it but still listening for incoming connections from www.example.it?

tls internal provisions a locally signed certificate from Caddy instead of a third-party like LetsEncrypt.

If you only want to access via HTTP you would use http://www.example.it, that will only listen on :80 for that site-address, not :443 / HTTPS.