Want to setup HAproxy and ACME for internal use only

1

Hi, very noob here, so please be gentle :stuck_out_tongue: I would like to setup HAproxy and ACME on my pfSense for internal use only. I also use Wireguard to connect when on the road as that seems to me the safest way to not expose ports on my firewall (except the WG UDP of course, but should be safe since no TCP handshake).

I would like for example to connect to my Jellyfin (on my ProxMox host) and my Synology (both on different subnets) and not have those irritating self signed warnings (Brave browser seems to reset this every few days).

BUT, I’m completely clueless on how to set this up. I use static IP’s and they get added to the DNS resolver (checkbox, can ping them on hostname alone + local domain name), but that is as far as I get. I have no idea how to setup the ACME part.

Can someone explain this to me or point me to a tutorial specifically for internal setup?

2

There is likely more than one way to skin a cat, but this is what I did, at least for pfSense. I don’t use HAproxy so can’t speak to that. I went to cloudflare and purchased a domain for nominal fee ($9.99/year I think?).

I then used a DNS challenge against that domain to get a wild card certificate from Let’s Encrypt via the Acme service.

3

Thank you ! I stumbled on the something similar:

I’ll go this route then. Thanks again !

1 Like
4

I have a full tutorial on how to setup HAProxy and ACME here:

1 Like