For instance how can I use my *.domain.com SSL certs and NPM to route containers to a subdomain without exposing them? The main domain is exposed.

    • wildbus8979
      link
      fedilink
      English
      arrow-up
      2
      arrow-down
      2
      ·
      14 hours ago

      They do not. See my other reply about DNS verification.

      • ag10n@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        arrow-down
        1
        ·
        edit-2
        13 hours ago

        Your response clearly states publicly accessible DNS. A CA does not require anything public for local SSL and can work in conjunction with whatever service they want for that which is public.

        • wildbus8979
          link
          fedilink
          English
          arrow-up
          2
          arrow-down
          1
          ·
          13 hours ago

          Fair, I don’t know why I read OPs post as asking for let’s encrypt certs. Internal CA is indeed an option.