REQ: Built-in ACME/LetsEncrypt

[westurner@…]

Built-in support for ACME/LetsEncrypt would be very useful.

There are many solutions. Certbot modifying config in a container that doesn't have systemd timers because systemd doesn't work in containers is a non-starter. Mounting docker sockets into containers to reload when the cert changes is a non-starter.

If someone could please add ACME/LetsEncrypt support in a module that would solve a lot of issues for many, I think.

• Traefik has LetsEncrypt support.
  • "Document equivalents of client_max_body_size, nginx proxy_buffers, and proxy_buffer_size" ​https://github.com/containous/traefik/issues/4580
• Caddy has LetsEncrypt support.

• ​https://github.com/mattermost/mattermost-docker/pull/366#issuecomment-472423360

ACME implementations:

• ​https://letsencrypt.readthedocs.io/en/latest/using.html#nginx
• ​https://github.com/topics/letsencrypt
  • ​https://github.com/jwilder/nginx-proxy
• ​https://github.com/topics/letsencrypt?l=lua

[westurner@…]

​https://github.com/torhve/lua-resty-letsencrypt

On the fly SSL registration and renewal inside OpenResty/nginx using Let's Encrypt.

​https://github.com/torhve/lua-resty-letsencrypt/blob/master/letsencrypt.lua

[Maxim Dounin]

Duplicate of #1480.