Action required: Let's Encrypt certificate renewals

Thanks. I’ll look if we can install a device that could do that.

Also had an idea. Would opening on the router external inbound connections on port 80 but forwarding them to local port 443 on NAS be feasible and/or a good idea?

You could even use a RaspberryPi for such a simple task.
Or any other physical (or virtual) system running Apache or NGINX.
If needed, it could essentially be set to never “interact” with any internal systems at all.
Bring those two tasks down to just one task: Forward ALL requests from HTTP/80 to HTTPS/443.
LE will follow such a redirection.

[Also: doesn’t have to be standalone - but that may better delineate the security “perimeter”]

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.