Comment by jamesstidard
4 days ago
Heya, nice read. I’m wondering how you managed to get LetsEncrypt certs minted when your caddy isn’t exposed to the public internet. Doesn’t LetsEncrypt need to make a request back as part of the handshake to mint/refresh the certificate?
Would love to know as I wanted to do the same in the past and ended up self signing certs.
Use the DNS-01 challenge.
Or DNS-PERSIST-01 once it's ready: https://letsencrypt.org/2026/02/18/dns-persist-01.html
Much appreciated