Sep. 15, 2021
I had the idea [a] that I did not need wildcard SSL certificates and [b] that OpenBSD’s appoach to acme and httpd/relayd was better than haproxy.
And it seems to be working.
create/allocate a host and public IP point the domain under test to the public ip create a complete httpd.conf file start httpd in debug mode and test the config-ish ignore the SSL error create an acme-client.conf file launch the acme-client to create the SSL reload or restart httpd (now no errors) test in your browser and in the end…