Hacker News Reader

Yeah IMHO this is the way to go. Individual web apps managing their own SSL certs is a longterm mess. Only your proxy or HTTP gateway/router should ever touch or know about SSL certs.

Caddy is great for web servers, but it's still not possible to have it run commands post certificate provisioning. So it's kind of a non-starter for anything but web-servers as there is no way to tell a different system to reload certs.

We're working on this! Hoping to have our new event dispatching system ready in the next few months. This'll let you hook into the post-issuance event and do whatever you want afterwards.

Yeah! I saw the PR. Looking forward!

Not affiliated with caddy, but caddy is awesome! I use it all the time.

Apache also provides a 1-at party ACME client in the form of a module, mod_md.

I'd rater use Nginx. At least it's not a statically linked blob.

Static linking is a huge advantage. I don't understand the point you're trying to make.

Static linking is a huge disadvantage when it comes do security updates.

C is a huge disadvantage when it comes do security.

No, that depends entirely on how it's written.