Hacker News Reader

The configuration listed unfortunately doesn't work for the www version of the domain - Let's Encrypt requires individual certificates for the naked domain and each subdomain, including www.

Nginx configuration needs to handle the two (or more, depending on subdomains) certificates.

Let's Encrypt is a great initiative and hope that they can support nginx auto-renewal!

View on HN

> Let's Encrypt requires individual certificates

That's not accurate - you can have up to n[0] domains on a single certificate

[0]: I don't remember the exact number, but it's more than 2 at least.

Can you share how?

You add multiple domains to the Server Alternative Names of your CSR.

./letsencrypt-auto --apache -d thing.com -d www.thing.com -d otherthing.net

From their ReadMe -> https://github.com/letsencrypt/letsencrypt

Thanks!!!

Worked perfectly.

Yes, it works well with some subdomains too.

I'm pretty sure Nginx is already supported. Here's a container I used. Took about 5 mins to add to my docker-compose script

https://github.com/dmp1ce/nginx-proxy-letsencrypt

Reply on news.ycombinator.com