logoalt Hacker News

PurpleRamen • today at 3:56 PM • 2 replies • view on HN

Depending on the usecase, it's still difficult. Selfhosting can become really annoying because of this.


Replies

jandrese • today at 6:18 PM

Normally I think LetsEncrypt made self hosting a lot easier, at least if you wanted to support HTTPS.

LetsEncrypt is what finally solved the problem with the previous systems were perfect was the enemy of the good. There used to be a lot of focus on trying to verify that the person getting the cert was who they said they are, but LetsEncrypt came and sad "that part isn't important, protecting the data is what really matters" and basically solved the real problem wholesale. Very few people inspect the certificates on every website they visit, so those protections were mostly useless and created a roadblock to widespread adoption of HTTPS, scoping the problem down to just making sure nobody can inspect or modify the data in transit made automation not only possible but easy.

DaSHacka • today at 4:35 PM

Caddy and Tailscale can at least alleviate many of the issues and all-but make it automatic and painless (though both are more geared for homelab use). I agree nginx and the more standard webservers/services oftentimes don't have good support and require quite frankly too much manual configuration though. There's no excuse in 2026 for not including acme support OOTB with a single checkbox/config value. Plus, I can't believe the default ACME client is a snap (literally WHO wants this?) and not a simple static binary to help adoption/integration.