[GH-ISSUE #5193] Support custom / internal ACME CA using HTTP-01 challenge #3136

Open
opened 2026-02-26 07:37:56 +03:00 by kerem · 0 comments
Owner

Originally created by @vsc55 on GitHub (Jan 18, 2026).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/5193

Is your feature request related to a problem? Please describe.
Nginx Proxy Manager only supports Let’s Encrypt as an ACME provider and does not allow configuring a custom ACME directory URL.
This prevents using NPM with an internal or private ACME CA, even when the CA supports the standard HTTP-01 challenge.

Describe the solution you'd like
Add support for a custom / internal ACME CA with:

  • Ability to configure a custom ACME directory URL
  • Ability to trust a custom root/intermediate CA
  • Support for HTTP-01 challenge for certificate issuance and renewal

Describe alternatives you've considered

  • Generating certificates externally using an ACME client and importing them as “Custom Certificates” in NPM
  • Using a different reverse proxy that supports custom ACME CAs

Additional context
This would enable fully automated certificate management in homelab and private environments without relying on Let’s Encrypt.

Originally created by @vsc55 on GitHub (Jan 18, 2026). Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/5193 **Is your feature request related to a problem? Please describe.** Nginx Proxy Manager only supports Let’s Encrypt as an ACME provider and does not allow configuring a custom ACME directory URL. This prevents using NPM with an internal or private ACME CA, even when the CA supports the standard HTTP-01 challenge. **Describe the solution you'd like** Add support for a custom / internal ACME CA with: - Ability to configure a custom ACME directory URL - Ability to trust a custom root/intermediate CA - Support for HTTP-01 challenge for certificate issuance and renewal **Describe alternatives you've considered** - Generating certificates externally using an ACME client and importing them as “Custom Certificates” in NPM - Using a different reverse proxy that supports custom ACME CAs **Additional context** This would enable fully automated certificate management in homelab and private environments without relying on Let’s Encrypt.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/nginx-proxy-manager-NginxProxyManager#3136
No description provided.