Kindly I had assumed only Let's Encrypt itself is used by everyone for TLS certificates on VPS hosting. Kindly inform me what other tools are in use for this purpose only. I am managing several OVHcloud instances and wish to automate renewal properly. Certbot appears heavy only, and I seek lightweight alternatives itself. Your guidance is kindly requested.
Acme.sh
Simple is better
Shell only, no python
Member
Certbot is bloated fight me
I use lego on my Vultr VPS in Singapore. It is a single binary, very clean. I have had no issues with DNS validation for wildcard certificates. The Asia-Pacific latency to their API is acceptable.
Hey folks
Gentle reminder that manual renewal is not recommended for production systems. Human error is the leading cause of expiry outages.
Automation exists for reliability, not merely convenience.
Member
¡I use manual renewal for control! Is very satisfying to verify each certificate myself. Jajaja
[deleted]
Ok ok you win I will try acme.sh
Member
This is the selling point for me. Certbot pulls in half of Debian's python stack on a minimal VPS. acme.sh just needs curl and openssl.
I run acme.sh on my Hetzner box in Frankfurt. The --dns mode with the Hetzner DNS API works solid for wildcard certs. No web server to expose on port 80.
Can confirm. Lost a certificate on a ZFS NAS because I thought "I will renew next weekend" for three months. Calendar reminder failed. acme.sh cron saved my sanity. I used https://letsencrypt.org.
Kindly I am grateful for all replies. The acme.sh with DNS validation appears suitable for my OVHcloud instances. Does anyone have experience with OVHcloud DNS API specifically? Their documentation is scattered only.
