seelf icon indicating copy to clipboard operation
seelf copied to clipboard

SSL certificate handling

Open Aragur opened this issue 1 year ago • 5 comments

As far as I can see, there is no option to allow Traefik to generate it's SSL certificate automatically using f. e. a wildcard SSL cert using LetsEncrypt and the DNS API.

Aragur avatar Oct 14 '24 16:10 Aragur

For now, seelf configures Traefik certificate resolvers with a TLS challenge.

This is the most straightforward way to get a valid certificate without messing too much with DNS configuration (requiring additional user manipulation).

But you're right and supporting DNS challenge could be a nice feature.

YuukanOO avatar Oct 15 '24 06:10 YuukanOO

Do you think seelf could support something like Cloudflare argo tunnel? This is a nice feature of Coolify and would be cool to bring along here.

Additionally how could we go about using Cloudflare's DNS proxy here? This wouldn't completely work on the CF free tier as you can only issue certs to like x.example.com and not sub.x.example.com

alii avatar Jan 29 '25 15:01 alii

Do you think seelf could support something like Cloudflare argo tunnel? This is a nice feature of Coolify and would be cool to bring along here.

It could be feasible but I don't know Cloudflare at all.

Additionally how could we go about using Cloudflare's DNS proxy here? This wouldn't completely work on the CF free tier as you can only issue certs to like x.example.com and not sub.x.example.com

Exposing services on paths instead of subdomains could probably be a solution to overcome this limitation. For example, the default service of an app named sandbox could take the subdomain sandbox.example.com and a second exposed service something like sandbox.example.com/_nameoftheotherservice.

YuukanOO avatar Jan 30 '25 09:01 YuukanOO

Love that paths idea. Is that possible now? Apologies for the questions! Thank you for your time 😄

alii avatar Jan 30 '25 19:01 alii

Not possible yet but that's something I've already thought about.

YuukanOO avatar Feb 01 '25 21:02 YuukanOO