Report
What’s the best way to manage SSL certs on DigitalOcean? It’s such a pain every 90 days. There seems to always be some sort of new problem.
I use certbot and it automatically renews them for me.
Push, Certbot is the end of the SSL pain (as long as it works properly)
Looks like people have had some luck automating this: https://www.digitalocean.com/community/questions/how-set-up-automatic-update-of-let-s-encrypt-certificate
Thanks :) Following it now
I use Caddy instead of NGINX, works like a charm and comes with automatic HTTPS handling. https://caddyserver.com/
Caddy is awesome
I'm a fellow indie-hacker, and I built a service just for this problem.
Yes, you need some kind of automation to renew your SSL certificates. But even when that is set up, how will you know if it failed, without experiencing an outage? Enters www.haveibeenexpired.com - please give it a try, and may your SSL certificates be valid at all times!
Included in app platform to my knowledge. Else cloudflare issues 15 year SSL certificates.
I still buy them and you can change every 2 years.
I use certbot and have a cron job that calls it everyday. You can specify a command to run afterwards, so it can restart your NGINX to pick up the new certs.
Is this just for a one domain or a wild card?