If these are "private" servers, you may find using the DNS-01 challenge more suitable, as then only the DNS server needs to be exposed to the world rather than also exposing the web server. The only tricky part that that you need to automate the proper response to the DNS challenge, either through using a DNS server that supports an API (and a plugin for your ACME client to use it), or through something like acme-dns or agnos.
Related topics
| Topic | Replies | Views | Activity | |
|---|---|---|---|---|
| Letsencrypt behind NAT different port | 9 | 13886 | December 4, 2017 | |
| We are planing to open port 80 for autorenewal of the certificate | 4 | 1232 | July 16, 2020 | |
| SSL Letsencrypt behind NAT and on different port than 443 | 1 | 23773 | February 21, 2017 | |
| My isp uses port 80 and i want to use certbot in port another port | 3 | 991 | June 10, 2023 | |
| Renew certificate without ports 80 or 443 | 5 | 979 | February 26, 2022 |