Let's Encrypt with NGINX, with redirect and whitelisted IP's

[_az]

@h0tt5auc3

With LE probing on port 80, and while I have a port redirect from 80 to 443, is it still possible to have LE auto-renew? Or do I have to disable the port forward and manually run a renewal?

The http-01 challenge will follow a redirect to https, yes.

@h0tt5auc3

Does LE list its public IP’s anywhere? It shouldn’t be the end of the world since I can leave 80 open to all, and then just have HTTPS traffic allowed in for only the whitelisted hosts

The IPs cannot be relied upon: IP addresses of outbound validators stability over time - #3 by jsha