TLS
The CA/Browser Forum just approved shrinking TLS certificates to 47 days by 2029. We'll soon pay the same price for commercial certs that expire faster than a DHCP lease. Time to embrace automation - those 'annoying' 90-day Let's Encrypt certificates suddenly look like visionaries.
homelab
Transform your homelab with a custom validated domain using Nginx Proxy Manager, Cloudflare, and wildcard SSL. Access services through clean, secure URLs instead of IP addresses and ports.
apache
I couldn't get my website https://odlicznik.pl/ obtaining certificate with certbot both with --apache plugin and certonly option as well. First method failed because certbot somehow couldn't find vhost in httpd-vhost.conf (which is included in httpd.conf) certbot-3.7 --apache --apache-ctl /usr/pkg/sbin/
sysadmin
Wynik 80% w https://www.ssllabs.com/ zapewnia już ocenę A, ale żeby dostać A+ trzeba dokonać kilku modyfikacji w samym certyfikacie oraz ustawieniach apache Po pierwsze klucz musi mieć minimum 4096 bity: certbot-3.7 certonly --standalone --rsa-key-size 4096 -d pro-it.rocks -d www.pro-it.rocks Po drugie trzeba opublikować