July 5, 20242 yr Hi folks, I am using the `swag` container to get HTTPS working for publicly facing services. This so far works fine. I have: 1. `ddns-updater` able to update my WAN IP on Cloudflare 1. I have `swag` able to generate a wildcard certificate I have exaclidraw working on `draw.<mydomain>.cc` with HTTPS. I am trying to do the same with internal-only services. I tried to use the certificate generate by `swag`, which is available in `/mnt/user/appdata/swag/etc/letsencrypt/live/<mydomain>.cc/fullchain.pem`. In order to avoid having to manage this certificate manually, i was going to symlink it to `/boot/config/ssl/certs/unraid_unraid_bundle.pem`, but that leads to an error. What else can I try? Just copy the letencrypt certificate locally and copy it again when letencrypt updates the certs?
July 7, 20241 yr Author Solution It turns out that the `.pem` file needed by unraid has to be a "bundle" - i.e., it includes both the cert and the key. This is easy to do by concatenating both files with `cat`. Now, you do have to manage updating the cert whenever `swag` updates it, but this is easy enough to do by having a script run on a regular basis.
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.