From 516dbbec88204cbc39905bacc0fb1ed52979ec6b Mon Sep 17 00:00:00 2001 From: kjeld Schouten-Lebbing Date: Sat, 10 Apr 2021 10:11:18 +0200 Subject: [PATCH] Update Certificate docs to reflect current ACME instability --- docs/manual/certificates.md | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/docs/manual/certificates.md b/docs/manual/certificates.md index 80265ce0364..7cc1c5d4794 100644 --- a/docs/manual/certificates.md +++ b/docs/manual/certificates.md @@ -74,6 +74,19 @@ Copy-Paste the keys into their respective boxes and hit `save` There are a few known bugs, issues and/or oddities currently in regards to Certificates +##### Error during certificate creation + +ACME (the system doing letsencrypt) is not super stable on TrueNAS SCALE currently. This is a SCALE issue and not (directly) related to TrueCharts. +We suggest the following steps to limit the chance of errors during certificate creation: + +- Use the DNS-Authenticators DNS server as TrueNAS SCALE DNS server under "Networking". For example, for cloudflare this would be `1.1.1.1` + +- Use global Cloudflare API keys, not zoned Tokens + +- Reboot after ACME errors + +We sincerely hope iX Systems solves the ACME instabilities with due priority. + ##### Traefik not accepting/using certificates Sometimes you might notice Traefik ignores your certificate. This is most likely due to the domain on your certificate, being different from the domain you entered into the reverse proxy host box.