ACME / letsencrypt
Usage
We use the ACME module's nginx integration for basically everything. Beware of rate limits when redeploying lots of things at once! Let's Encrypt is a little picky about those.
Workarounds & peculiar configuration choices
Certs live under /var/lib/acme/
If you need to remove a cert for whatever reason, be aware that there is a
hidden .lego
folder, that contains state as well