LE Certificate on multiple servers possible?

Discussion in 'Installation/Configuration' started by iqpascal, Jan 10, 2025.

  1. iqpascal

    iqpascal Member

    Hi,
    I have 1 site which I want to run over multiple ISPconfig servers but without making a slave server for the entire server and doing stuff with NFS as for the site itself that's not needed as the files themselves never change and other sites run on the main server as well that don't need it.

    I've searched the forums for a solution but can only find older topics or topics with other questions about LE certificates or older topics that hint towards such a thing being possible in the future.

    So my question is it currently possible to synchronize only the LE certificate over multiple servers?
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    LE clients like certbot and Av´cme.sh do not support it to issue the certificate multiple times on multiple servers as let's Encrypt must be able to reach the issuing LE client under the domain that is in the SSL cert. Therefore you need a shared storage like NFS to make the same cert available on multiple systems.
     
  3. iqpascal

    iqpascal Member

    Thanks for the quick answer Till. So sadly no possible way to just sync those certificate files.
    Would it be sufficient to just share the site SSL folder so the actual website files are not negatively impacted by NFS?
    Or would the better solution be to just leave LE for this specific site and buy a (cheap) 1Y certificate and install it on all the nodes?
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    Do you use certbot or acme.sh as LE client?
     
  5. ahrasis

    ahrasis Well-Known Member HowtoForge Supporter

    I am very sure you can manually sync the LE SSL certs between servers, why not. You will just need a proper script to make it works.
     
  6. remkoh

    remkoh Active Member HowtoForge Supporter

    For sure. I'm doing it actively. Just a simple bash script that copies over ssh.
     
    ahrasis likes this.

Share This Page