How to use Acme-Companion with ip address of local machine or ddns url?

[Nightwalker83]

Hi,

Is it possible to get Acme-Companion working with the ip address of the host machine or the url of the ddns service? I am only able to get it to work with localhost.

Thanks,

Aaron

[Nightwalker83]

Any information on this?

[buchdag]

Hi.

Is it possible to get Acme-Companion working with the ip address of the host machine ...

No. You can't get an SSL certificate for an IP address through Let's Encrypt. Some CA will issue certificates for an IP, some might even do it for free, but AFAIK none of them make this possible through the ACME protocol.

... or the url of the ddns service

If I understood the question correctly : no, you can't obtain an SSL certificate from a CA for a domain that you can't prove is yours / you have control over, and you should theoretically never be able to do this.

Also please don't "up" your questions or issues less than 24/48 hours after their creation, this is not a help desk 🙏

[Nightwalker83]

Ah ok! My ddns is afraid.org but the associated url I chose with my freedns açcount and password. For example my ddns through afraid is name test.ignorelist.com with ignorelist.com being the ddns. However, I go say vaultwarden.test.ignorelist.com on my lan it does not work.

[buchdag]

I'm sorry I don't want to be rude or anything but I can't make sense of the above message.

My ddns is afraid.org but the associated url I chose with my freedns açcount and password.

But what ? This sentence reads like part of it is missing.

For example my ddns through afraid is name test.ignorelist.com with ignorelist.com being the ddns.

The ddns is something in the first part of the sentence then something else in the last part 🤷

However, I go say vaultwarden.test.ignorelist.com on my lan it does not work.

What does "I go say vaultwarden.test.ignorelist.com on my lan" means ? What does not work ?

[Nightwalker83]

If I put vaultwarden.ignorelist.com in the address bar and go to that despite it redirecting to my computer the site can not be reached. Whereas is a localhost:8080 on the host vaultwarden is displayed with the ssl enabled. I am trying to figureout how I can enable ssl for my entire network without having to import the certificates to rach browser where I might view an encrypted website. Been looking at your nginx project and wondering if that is what I need to use instead?

[buchdag]

Could you please provide the complete, detailed context of what you want to do and how you've got everything set up so far (including your local network and residential gateway since it look like you want to make service running on your local network available to the outside) ?

It's impossible to understand where you are currently standing with tiny bits of information like "if I go to localhost:8080 vaultwarden is working" and so on.

[Nightwalker83]

I am trying do what NginxProxyManager does expect for localhost. I don't know whether or not I still need to use Let'sEncrypt and when I tried Let'sEncrypt as of NPM it keep failing. On NPM I managed to get vaultwarden setup to use ssl certificate bit though there was a better way rather than having to add each site individually. I can create the certificates no problem it is just a matter of finding a solution to apply them network wide instead of trying add them to each individual browser.

[buchdag]

You're still only providing unclear and partial bits of information, sorry but I can't help.