starred/nginx-proxy-manager-NginxProxyManager

Fork 0

mirror of https://github.com/NginxProxyManager/nginx-proxy-manager.git synced 2026-04-26 01:45:54 +03:00

[GH-ISSUE #944] Use a private CA with certbot for intranet #799

New issue

Closed

opened 2026-02-26 06:34:28 +03:00 by kerem · 4 comments

kerem commented

2026-02-26 06:34:28 +03:00

Owner

Originally created by @mkrumbholz on GitHub (Mar 12, 2021).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/944

If used as internal reverse proxy it would be great to include auto-renewing certificates on a private CA.

It would need the additional informations:

Root CA certificate
CA server URL

The CA server URL should also use https and is using a certificate certified with the root certificate of the CA.

Standalone CLI example:
sudo REQUESTS_CA_BUNDLE=path/certs/root_ca.crt certbot certonly -n --standalone -d example.internal --server https://ca.internal/acme/acme/directory
Certbot uses a ENV for the requests CA bundle path.

More examples: https://smallstep.com/docs/tutorials/acme-protocol-acme-clients

Originally created by @mkrumbholz on GitHub (Mar 12, 2021). Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/944 If used as internal reverse proxy it would be great to include auto-renewing certificates on a private CA. **It would need the additional informations:** - Root CA certificate - CA server URL The CA server URL should also use https and is using a certificate certified with the root certificate of the CA. **Standalone CLI example:** `sudo REQUESTS_CA_BUNDLE=path/certs/root_ca.crt certbot certonly -n --standalone -d example.internal --server https://ca.internal/acme/acme/directory` *Certbot uses a ENV for the requests CA bundle path.* More examples: https://smallstep.com/docs/tutorials/acme-protocol-acme-clients

kerem

2026-02-26 06:34:28 +03:00

closed this issue
added the
enhancement

stale
labels

kerem commented

2026-02-26 06:34:29 +03:00

Author

Owner

@Gitoffomalawn commented on GitHub (Dec 19, 2021):

I'm also interested in this feature. I'm using a private CA for my setup with a non-routable TLD, and having renewal done automatically would be awesome. Looks like integration with SmallStep would make this possible.

@Gitoffomalawn commented on GitHub (Dec 19, 2021): I'm also interested in this feature. I'm using a private CA for my setup with a non-routable TLD, and having renewal done automatically would be awesome. Looks like integration with SmallStep would make this possible.

kerem commented

2026-02-26 06:34:29 +03:00

Author

Owner

@github-actions[bot] commented on GitHub (Mar 17, 2024):

Issue is now considered stale. If you want to keep it open, please comment 👍

@github-actions[bot] commented on GitHub (Mar 17, 2024): Issue is now considered stale. If you want to keep it open, please comment :+1:

kerem commented

2026-02-26 06:34:29 +03:00

Author

Owner

@github-actions[bot] commented on GitHub (Apr 28, 2025):

Issue was closed due to inactivity.

@github-actions[bot] commented on GitHub (Apr 28, 2025): Issue was closed due to inactivity.

kerem commented

2026-02-26 06:34:29 +03:00

Author

Owner

@Gitoffomalawn commented on GitHub (Apr 28, 2025):

Requesting this be reopened, as there's still interest in this feature.

@Gitoffomalawn commented on GitHub (Apr 28, 2025): Requesting this be reopened, as there's still interest in this feature.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

starred/nginx-proxy-manager-NginxProxyManager#799

No description provided.

Rows
Columns