DNS

Most of these posts are simply my internal notes turned into something I can share with others. I definitely don’t claim to be an expert on every topic I write about, but I hope they can serve as a useful starting point, reference, or outline for someone working on a similar problem. If you spot anything that could be improved, corrected, or explained better, I’d really appreciate your feedback. Always happy to learn and improve!

Automating Wildcard Let's Encrypt Certificates on pfSense with deSEC

In a production or homelab environment, managing SSL certificates across multiple internal services gets tedious fast. Putting your services behind pfSense with HAProxy and automating wildcard certificates through the pfSense ACME package gives you a clean, hands off setup. In the previous post, we …

Let's Encrypt DNS Challenges with deSEC Subzone Delegation

Generating Let’s Encrypt certificates for internal services behind private IPs and NAT isn’t as simple as doing it for servers with a public IP. When a service is reachable over port 80 or 443, you can just use the standard HTTP-01 challenge. For private services though, your main option …