Hello all, I have a domain with several subdomains. With the " A" and SRV records i foward the services to my homeserver, where a xmpp is running. The domain is: example.com The subdomains are upload.example.com forward.example.com groups.example.com stun.example.com etc. I'am using nginx…

Is your domain really xmpp.com? To hide subdomains the option would be to use a wildcard certificate. But that would require the dns-01 challenge, which is often/sometimes more difficult to implement. And as you're using nginx proxy manager, you're pretty much on your own figuring that out. That's …

Hi Osiris, :slight_smile: No it is not the right domain, just an example of it. Bottom line is, that i want the subdomains not be exposed. VIa NPM i get certs for all the domains. I've red some about wildcards, but i think i 'am to inexpierenced to implement that. I need to make local domains a…

[image] guus: No it is not the right domain, just an example of it. Please refrain from using real world domain names as examples. Please remove the currently used real world domain name and change to e.g. example.com, one of the IANA domain names reserved specially for thus purpose. [ima…

Can you clarify what you mean by "exposed"? If the server is just to be used on some internal network, then you can use the DNS-01 challenge (as previously stated, required for wildcards but can be used for non-wildcard names too), though the name would still be public. Or, you can try to configure …

Let me clarify. I have a homelab, where i host a application that is calles ejabberd. Ejabberd is a xmpp server. xmpp is a protocol that is also used by Whatsapp. The server needs 5 subdomains. I have a domain example.com and on the hoster i have 5 subdomains domain: example.com subdomain xmpp…

exposed means that subdomains are visible by using tools that enumerates subdomains. One tool is dnsdumpster to do this. I have not that knowledge of wildcards.

So, to answer Peter's question then ... You don't need to access the subdomain services from the public internet then? Because their IP will have to be in the public DNS to clients can find the IP. Or, use a DNS wildcard so any subdomain name resolves to the same IP. Let's Encrypt is a public Cer…

[image] guus: What i try to accomplish, is that i want that my server can handle the subdomains. Which software/part of the server should handle the subdomains? If NPM/nginx, then focus questions/research on that. If Ejabberd, then focus your questions/research on that.

After some search, i came up with this excellent video. I hope this helps. If i'm correct you can run subdomain within a local environment. How to get certs for internal subdomains.

Certs for domainname and subdomain

Help

guus November 12, 2023, 7:56am 17

Goodmorning,

What's clear to me is, that i must use a DNS-01 challenge, and there are methods for this.
In the video Cloudflare is used, some are using other providers.

Handling of DNS SRV types (XMPP) with HTTP challenge?

Topic		Replies	Views
Verify ownership of domain and get cert for subs Help	10	2586	December 6, 2021
Certificates for subdomains or Wildcards Help	15	3632	April 7, 2020
Wildcard certificate Help	9	899	September 29, 2021
Wildcard cert with internal-only subdomain Issuance Tech	11	6019	October 26, 2018
Cant use a Subdomain in NGINX Proxy Manager Help	6	2413	February 2, 2023

Certs for domainname and subdomain

Related topics