mirror of
https://github.com/caddyserver/website.git
synced 2025-04-21 20:46:15 -04:00
tls: get_certificates & manager modules (tailscale, http) (#207)
* docs: Add cert getters to tls (tailscale, http) * Rename "getter" modules to "manager" modules * Fix ID * Add note on automatic-https page * loopback -> local * Minor tweaks * Clarify that enabling tailscale is not necessary * More clarifications
This commit is contained in:
parent
8e6482173f
commit
d0317c0a1c
2 changed files with 45 additions and 1 deletions
|
@ -79,6 +79,10 @@ Any of the following will prevent automatic HTTPS from being activated, either i
|
|||
- Listening exclusively on the HTTP port
|
||||
- Manually loading certificates (unless [this config property](/docs/json/apps/http/servers/automatic_https/ignore_loaded_certificates/) is true)
|
||||
|
||||
**Special cases:**
|
||||
|
||||
- Domains ending in `.ts.net` will not be managed by Caddy. Instead, Caddy will automatically attempt to get these certificates at handshake-time from the locally-running [Tailscale](https://tailscale.com) instance. This requires that [HTTPS is enabled in your Tailscale account](https://tailscale.com/kb/1153/enabling-https/) and the Caddy process must either be running as root, or you must configure `tailscaled` to give your Caddy user [permission to fetch certificates](https://github.com/caddyserver/caddy/pull/4541#issuecomment-1021568348).
|
||||
|
||||
|
||||
## Effects
|
||||
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue