Question 1

How to set up acmetool with nginx for automatic renewal?

Accepted Answer

Configure nginx to proxy requests under /.well-known/acme-challenge/ to port 402 for proxy validation, then use acmetool want command and set up a cron job with acmetool --batch to handle renewals without downtime.

Question 2

acmetool vs certbot: which is better for my server?

Accepted Answer

acmetool is better if you prefer a lightweight, non-intrusive tool that doesn't modify web server configs and offers zero-downtime renewal, while certbot provides more automated configuration but can be heavier and more invasive.

Question 3

Can acmetool handle wildcard certificates from Let's Encrypt?

Accepted Answer

Yes, acmetool supports ACME servers that issue wildcard certificates; use the want command with wildcard domains, but ensure your validation method (like DNS hooks) is properly configured for domain validation.

Question 4

How to configure DNS validation with acmetool?

Accepted Answer

Write custom shell scripts as hooks to update DNS records, as acmetool doesn't have built-in DNS providers; refer to the user guide for examples and ensure scripts are executable and secure.

Question 5

What to do if my acmetool cron job fails?

Accepted Answer

Run acmetool manually with --xlog.severity=debug for verbose logging to diagnose issues like network errors or validation failures, then check web server configuration or hook scripts based on the output.

Question 6

Is acmetool suitable for high-traffic production environments?

Accepted Answer

Yes, its zero-downtime autorenewal and web server agnostic design make it reliable for production, but ensure proper validation method setup and monitor cron jobs to avoid certificate expiration.

acmetool

What is acmetool?

Overview

Use Cases

Best For

Related Projects

Found a gem we're missing?

Not Ideal For

Pros & Cons

Pros

Cons

Open Source Alternative To

Frequently Asked Questions