tls: get_certificates & manager modules (tailscale, http) (#207)

* docs: Add cert getters to tls (tailscale, http)

* Rename "getter" modules to "manager" modules

* Fix ID

* Add note on automatic-https page

* loopback -> local

* Minor tweaks

* Clarify that enabling tailscale is not necessary

* More clarifications
This commit is contained in:
Matt Holt 2022-03-17 11:59:08 -06:00 committed by GitHub
parent 8e6482173f
commit d0317c0a1c
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 45 additions and 1 deletions

View file

@ -79,6 +79,10 @@ Any of the following will prevent automatic HTTPS from being activated, either i
- Listening exclusively on the HTTP port
- Manually loading certificates (unless [this config property](/docs/json/apps/http/servers/automatic_https/ignore_loaded_certificates/) is true)
**Special cases:**
- Domains ending in `.ts.net` will not be managed by Caddy. Instead, Caddy will automatically attempt to get these certificates at handshake-time from the locally-running [Tailscale](https://tailscale.com) instance. This requires that [HTTPS is enabled in your Tailscale account](https://tailscale.com/kb/1153/enabling-https/) and the Caddy process must either be running as root, or you must configure `tailscaled` to give your Caddy user [permission to fetch certificates](https://github.com/caddyserver/caddy/pull/4541#issuecomment-1021568348).
## Effects