Three server as fallback for 6 domains - how use certbot

Help
1

My domain is: db0bpy.de, dg2jm.de, ov-h44.de, rkraft.de, wgbp.de / Server domain : host1.pyrmont-akb.de, host2.pyrmont-akb.de, host3.pyrmont-akb.de

I ran this command:

It produced this output:

My web server is (include version): apache2 2.4

The operating system my web server runs on is (include version): Rocky 8 8.10

My hosting provider, if applicable, is: Strato

I can login to a root shell on my machine (yes or no, or I don't know): Yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): Webmin/Virtualmin

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): certbot 1.22.0

I use three kvm-server to have a fallback for 6 domains. Up to now each domain with its own cert.

Is there a way to keep mantainance low?

2

The best practice is to have each domain on it's own certificate. This keeps a failure on one domain from impacting the others.

You can run your ACME client on only one machine/domain, and either save to shared storage (shared partition or cloud storage) or use a deployment hook to run a script copying it to other machines. You can use redirects from different domains/servers onto a single server running the ACME client.

Some clients offer coordinated cloud storage. I believe Caddy does.

certbot 1.22.0

This is extremely old. You should migrate to the snapd package manager.

4 Likes
3

Thank’s - I will try
I report if done