NginxProxyManager / nginx-proxy-manager

Docker container for managing Nginx proxy hosts with a simple, powerful interface
https://nginxproxymanager.com
MIT License
22.09k stars 2.54k forks source link

Load existing LetsEncrypt Cert from volume #2347

Open mricharz opened 1 year ago

mricharz commented 1 year ago

My problem

I have the problem, that my OPNSense Firewall is already challenging ACME Wildcard Certificate. OPNSense has the ability to transfer the certificates to remote machines with automation. So far, so fine.

With NPM i only have the possibility to upload single certificate files and i need to reupload them over and over again if a new cert from ACME was requested. I cannot load an existing /etc/letsencrypt folder into NPM. NPM is just ignoring its content and is not giving me an option to use the existing certificate.

My wish

I would like that NPM is recognizing an existing certificate in /etc/letsencrypt and is allowing me use it.

best regards

Jorval commented 1 year ago

Hey,

i have a similiar problem. i update my certs on a central host where my webservices are hosted (not using npm atm) but i like to use npm in my homelab that is behind a firewall at LE has no way to reach the host. i would prefer an additional option that would allow me to import my already issued certificate (or let me give it a path where to find the cert) that way i could easily ansible the certs around.

best regards.

kaysersoze commented 1 year ago

I would also love to have this feature, where NPM would be able to list existing certificates within a directory or mounted Docker volume.

I'm hosting my own internal CA for generating SSL certs (step-ca) and would handle the issuing and renewing of SSL certs using something like acme.sh on another container, and dropping the generated certificates in the volume for NPM to use.

stanthewizzard commented 8 months ago

Same

aweb3r commented 8 months ago

Same same

github-actions[bot] commented 1 month ago

Issue is now considered stale. If you want to keep it open, please comment :+1: