2018-12-23 09:00:12 +00:00
# Adjusting SSL certificate retrieval (optional, advanced)
2023-02-26 14:14:05 +00:00
By default, this playbook retrieves and auto-renews free SSL certificates from [Let's Encrypt ](https://letsencrypt.org/ ) for the domains it needs (e.g. `matrix.<your-domain>` and others)
2018-12-23 09:00:12 +00:00
2023-02-26 14:14:05 +00:00
This guide is about using the integrated Traefik server and doesn't apply if you're using [your own webserver ](configuring-playbook-own-webserver.md ).
2019-02-01 14:50:02 +00:00
2019-02-08 09:59:00 +00:00
2023-02-26 14:14:05 +00:00
## Using staging Let's Encrypt certificates instead of real ones
2019-02-08 09:59:00 +00:00
2023-02-26 14:14:05 +00:00
For testing purposes, you may wish to use staging certificates provide by Let's Encrypt.
2019-02-08 09:59:00 +00:00
2023-02-26 14:14:05 +00:00
You can do this with the following configuration:
2019-02-01 14:50:02 +00:00
```yaml
2023-02-26 14:14:05 +00:00
devture_traefik_config_certificatesResolvers_acme_use_staging: true
2019-02-01 14:50:02 +00:00
```
2019-02-08 09:59:00 +00:00
2023-02-26 14:14:05 +00:00
## Disabling SSL termination
2019-02-08 09:59:00 +00:00
2023-02-26 14:14:05 +00:00
For testing or other purposes, you may wish to install services without SSL termination and have services exposed to `http://` instead of `https://` .
2019-02-08 09:59:00 +00:00
2023-02-26 14:14:05 +00:00
You can do this with the following configuration:
2019-02-08 09:59:00 +00:00
```yaml
2023-02-26 14:14:05 +00:00
devture_traefik_config_entrypoint_web_secure_enabled: false
2019-02-08 09:59:00 +00:00
```
2023-02-26 14:14:05 +00:00
## Using self-signed SSL certificates
2022-03-03 16:15:39 +00:00
2023-02-26 14:14:05 +00:00
Using self-signed certificates with Traefik is a somewhat involved processes, where you need to manually mount the files into the container and adjust the "static" configuration to refer to them.
2022-03-03 16:15:39 +00:00
2023-02-26 14:14:05 +00:00
Feel free to research this approach on your own and improve this guide!