build
build copied to clipboard
Automate SSL Cert infrastructure
Per https://github.com/nodejs/build/issues/4029 Our current paid SSL certs are valid until 2027, however, they will still need to be manually replaced everywhere, and will need to be funded in the future to ensure continuity of service.
We can eliminate the maintenance and cost of keeping our certificates current by switching over to an ACME based solution (https://acmeclients.com/), giving us free, and automated replacements.
In general we should be using certbot everywhere we can, and fall back on acme.sh if there are any environments where certbot is unsupported.
unofficial-builds is already using this, so the pattern is easily replicable for our other services.