Comment on Ask HN: Do you use Nginx in production? or have you switchedparentComments−martinbaunOP2yInteresting, what do you for SSL instead?−efortis2yI use acme.sh with DNS challenges on an external machine. Then I push up (rsync) the certs and reload Nginx.Here’s a blog post https://blog.uxtly.com/isolated-tls-certificate-creation−martinbaunOP2yThanks eFortis? I guess this mainly for security and separation of concerns?−efortis2yYes, the certificate renewal and the server are more hardened this way.−martinbaunOP1yCool! Do you do other things to hardend the servers like Knockerd?
Comments
Interesting, what do you for SSL instead?
I use acme.sh with DNS challenges on an external machine. Then I push up (rsync) the certs and reload Nginx.
Here’s a blog post https://blog.uxtly.com/isolated-tls-certificate-creation
Thanks eFortis? I guess this mainly for security and separation of concerns?
Yes, the certificate renewal and the server are more hardened this way.
Cool! Do you do other things to hardend the servers like Knockerd?