[GH-ISSUE #2984] Add more options for certificate sources #2032

Open
opened 2026-02-26 07:33:46 +03:00 by kerem · 13 comments
Owner

Originally created by @minecrawler on GitHub (Jun 6, 2023).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/2984

Is your feature request related to a problem? Please describe.

Currently, NPM supports Let's Encrypt or uploading custom certificates. As a self-hoster, all my services are internal, so Let's Encrypt doesn't work. Creating a custom certificate for each service is tedious. I wish there were better options in NPM for self-hosters!

Describe the solution you'd like

NPM should support configuring the ACME server, so that I can setup a Smallstep or Boulder CA server myself (e.g. direct it to https://my-ca.local for certificate requests)

Describe alternatives you've considered

  • NPM generates certificates itself - and make it a simple option. NPM should be capable to do so and can offer the user to download the required certificates to install them on their client PC or other servers.
  • NPM adds a pass-through option for proxying services (so I can use the service's own certificates)

Additional context

image

should become

image

The "several custom CAs" thing is just an idea, though practically most people probably only have one... as long as it remembers the info for that one I don't care if there's only one option :)

Also, the rename of "Custom" felt better with all the new options, but I have no strong feelings about it...

Originally created by @minecrawler on GitHub (Jun 6, 2023). Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/2984 **Is your feature request related to a problem? Please describe.** <!-- A clear and concise description of what the problem is. Ex. I'm always frustrated when [...] --> Currently, NPM supports Let's Encrypt or uploading custom certificates. As a self-hoster, all my services are internal, so Let's Encrypt doesn't work. Creating a custom certificate for each service is tedious. I wish there were better options in NPM for self-hosters! **Describe the solution you'd like** <!-- A clear and concise description of what you want to happen. --> NPM should support configuring the ACME server, so that I can setup a Smallstep or Boulder CA server myself (e.g. direct it to `https://my-ca.local` for certificate requests) **Describe alternatives you've considered** <!-- A clear and concise description of any alternative solutions or features you've considered. --> - NPM generates certificates itself - and make it a simple option. NPM should be capable to do so and can offer the user to download the required certificates to install them on their client PC or other servers. - NPM adds a pass-through option for proxying services (so I can use the service's own certificates) **Additional context** <!-- Add any other context or screenshots about the feature request here. --> ![image](https://github.com/NginxProxyManager/nginx-proxy-manager/assets/1130708/93a55dff-441c-458c-b103-2837849b6523) should become ![image](https://github.com/NginxProxyManager/nginx-proxy-manager/assets/1130708/11e4e264-d5c5-4fb8-b121-407aceec5708) The "several custom CAs" thing is just an idea, though practically most people probably only have one... as long as it remembers the info for that one I don't care if there's only one option :) Also, the rename of "Custom" felt better with all the new options, but I have no strong feelings about it...
Author
Owner

@Catospye commented on GitHub (Jun 7, 2023):

bump!

<!-- gh-comment-id:1579912122 --> @Catospye commented on GitHub (Jun 7, 2023): bump!
Author
Owner

@github-actions[bot] commented on GitHub (Jan 18, 2024):

Issue is now considered stale. If you want to keep it open, please comment 👍

<!-- gh-comment-id:1897634071 --> @github-actions[bot] commented on GitHub (Jan 18, 2024): Issue is now considered stale. If you want to keep it open, please comment :+1:
Author
Owner

@minecrawler commented on GitHub (Jan 18, 2024):

Still very much relevant!

<!-- gh-comment-id:1899293475 --> @minecrawler commented on GitHub (Jan 18, 2024): Still very much relevant!
Author
Owner

@Gauss23 commented on GitHub (Apr 15, 2024):

I think this is a really nice feature.

<!-- gh-comment-id:2057536878 --> @Gauss23 commented on GitHub (Apr 15, 2024): I think this is a really nice feature.
Author
Owner

@github-actions[bot] commented on GitHub (Nov 7, 2024):

Issue is now considered stale. If you want to keep it open, please comment 👍

<!-- gh-comment-id:2461163778 --> @github-actions[bot] commented on GitHub (Nov 7, 2024): Issue is now considered stale. If you want to keep it open, please comment :+1:
Author
Owner

@Gauss23 commented on GitHub (Nov 7, 2024):

👍

<!-- gh-comment-id:2461311573 --> @Gauss23 commented on GitHub (Nov 7, 2024): 👍
Author
Owner

@minecrawler commented on GitHub (Nov 7, 2024):

still labelled as stale, so another bump for the bot

<!-- gh-comment-id:2463352851 --> @minecrawler commented on GitHub (Nov 7, 2024): still labelled as stale, so another bump for the bot
Author
Owner

@minecrawler commented on GitHub (Nov 7, 2024):

@jc21 is there any process which needs to be triggered? Or is it just a "I don't have time right now, no one else is working on it, and you should just do it yourself" situation?

<!-- gh-comment-id:2463359777 --> @minecrawler commented on GitHub (Nov 7, 2024): @jc21 is there any process which needs to be triggered? Or is it just a "I don't have time right now, no one else is working on it, and you should just do it yourself" situation?
Author
Owner

@TiggsPanther commented on GitHub (Jan 20, 2025):

I'll add another vote to this one.
I've started using step-ca so I can automate internal certs for my environment. Being able to specify that in NPM would be useful in that.

<!-- gh-comment-id:2602092599 --> @TiggsPanther commented on GitHub (Jan 20, 2025): I'll add another vote to this one. I've started using _step-ca_ so I can automate internal certs for my environment. Being able to specify that in NPM would be useful in that.
Author
Owner

@github-actions[bot] commented on GitHub (Aug 11, 2025):

Issue is now considered stale. If you want to keep it open, please comment 👍

<!-- gh-comment-id:3173104042 --> @github-actions[bot] commented on GitHub (Aug 11, 2025): Issue is now considered stale. If you want to keep it open, please comment :+1:
Author
Owner

@minecrawler commented on GitHub (Aug 12, 2025):

still relevant

<!-- gh-comment-id:3178150361 --> @minecrawler commented on GitHub (Aug 12, 2025): still relevant
Author
Owner

@danieltr3s commented on GitHub (Aug 15, 2025):

bump!

<!-- gh-comment-id:3192933934 --> @danieltr3s commented on GitHub (Aug 15, 2025): bump!
Author
Owner

@LeMathochist commented on GitHub (Jan 1, 2026):

Bump bump bump. Would like option to chose source CA.

<!-- gh-comment-id:3704194170 --> @LeMathochist commented on GitHub (Jan 1, 2026): Bump bump bump. Would like option to chose source CA.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/nginx-proxy-manager-NginxProxyManager#2032
No description provided.