Using Let’s Encrypt for Internal Servers

But while there are many tools to automatically renew certificates for publicly available webservers (certbot, simp_le, I wrote about how to do that 3 years back), it’s hard to find any useful information about how to issue certificates for internal non Internet facing servers and/or devices with Let’s Encrypt. If everything’s working properly, you should be able to resolve this domain to its IP address using a normal DNS query:

Assuming you now control the DNS zone for completely and you can quickly edit it dynamically, you’re all set for actually issuing certificates for your local device domain via Let’s Encrypt. Using the server’s assigned domain (here: ), we then used Let’s Encrypt’s free certificate offering and their DNS challenge to issue a certificate for that server.

Source: blog.heckel.xyz