ehazlett / stellar

Simplified Container System

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Improve HA for Proxy TLS

ehazlett opened this issue · comments

Currently when using multiple nodes behind a frontend proxy (i.e. TCP) certificates can take a little while to retrieve as the acme challenge can bounce around to different nodes until it lands on the correct node. There are a couple things we could possibly do:

  • Replicate the certificate storage from a single node
  • Implement a custom TLS storage asset provider for the embedded Caddy