caprover / caprover-cli

Command Line Interface for https://github.com/caprover/caprover
72 stars 40 forks source link

Too many certificates already issued #82

Closed thepandaguitar closed 3 years ago

thepandaguitar commented 3 years ago

Hi @githubsaturn,

Is Caprover not using wildcard multi-domain certificates? I am getting the following error:

There were too many requests of a given type :: Error creating new order :: too many certificates already issued for {{mysite}} - see https://letsencrypt.org/docs/rate-limits/

Unfortunately this would be a deal breaker and make the project unsuitable for deploying many apps.

Any workarounds?

githubsaturn commented 3 years ago

Is Caprover not using wildcard multi-domain certificates? I am getting the following error:

No. wildcard certificate requites hooking into your DNS server. CapRover is not a DNS server.

Any workarounds?

You can manually obtain the cert and use the nginx-shared directory to manually edit the nginx config to load your custom cert.

thepandaguitar commented 3 years ago

@githubsaturn where can I find this folder?

githubsaturn commented 3 years ago

https://caprover.com/docs/nginx-customization.html#custom-files-and-directories

thepandaguitar commented 3 years ago

@githubsaturn you thought of everything, this is life saving. I love this project! 💯 I got a wildcard cert and set up the custom configs. Works like a charm.

githubsaturn commented 3 years ago

What about renewals

CapRover runs renewal only for certs that are issued using captain-certbot. You'd have to manually renew and replace your custom certs.

I am currently sending custom nginx config for each individual app. There's a way to do custom nginx config in the Settings tab, is that for Caprover itself or can it update all the app configs at once?

The one in settings is for CapRover itself, there is currently a feature request to make the default configurable: https://github.com/caprover/caprover/issues/977