TechHacker Newsabout 2 hours ago
TLS certificates for internal services done right
1 min read
Split-horizon DNS with a public CA like Let's Encrypt avoids self-signed certificate trust issues for internal services. NetBird's Custom Zones handle DNS resolution, while nginx binds to the VPN interface as a WAF. acme.sh automates certificate issuance and renewal via cron jobs.
Level
Hype check
Tap to vote and see what everyone thinks.
