How to create a certificate for a nodejs server listening on another port

Help
9

I just wanted to add:

  1. You absolutely want nginx to terminate the SSL connection and just have node handle http

  2. Since you’re using nginx and familiar with proxypass, you can create another proxypass for the “./well-known” directory on all your nginx port 80 domains, and then run certbot on an alternate port for validation. You’ll still need to do a (graceful) restart of nginx to activate the new cert, but that will let you run the renewal automatically without downtime.

I posted the full commands and setup in this comment last month: Ideas about how to automate initial configuration of certificates

1 Like