• Carlos Solís@communities.azkware.net
    link
    fedilink
    arrow-up
    5
    ·
    11 months ago

    The upcoming version of YunoHost for Debian Bookworm. Mostly because the latest old-stable version, Bullseye, is already deprecated for several apps such as Lemmy itself. I’m seriously considering to move to an all-Docker setup, but have no idea of how to handle automated certificate updates.

    • Swimmerman96@beehaw.org
      link
      fedilink
      arrow-up
      5
      ·
      11 months ago

      I assume you mean SSL/TLS certificates for internet accessable applications? I use a reverse proxy called Caddy in a Docker container, which handles requests from the internet and directs them to the proper docker container based on the subdomain. It also handles my certificates automatically, requesting a new Let’sEncrypt cert just before the old one expires using a community made plugin.

      • Carlos Solís@communities.azkware.net
        link
        fedilink
        English
        arrow-up
        1
        ·
        11 months ago

        Correct, I’m talking about Let’s Encrypt certificates - specifically, finding a way to port my existing private keys out of YunoHost and into said Caddy/Docker setup while keeping the monthly automated renewal. Same goes for all my ActivityPub apps - Pleroma/Akkoma, Lemmy, PeerTube - which will make servers that follow me freak out if I suddenly change keys by reinstalling from scratch.