Certificate generation error

[barren stag]

Just got it, but in the UI everything's good

I suspect that it's unable to perform HTTP challenge

I'm behind Cloudflare so is there any way to move cert generation to traefik which has tls-alpn and works?

from what I understood in docs, the autogeneration of certificate is after I first access domain

so first request will be very long I guess

but accessing main domain console didn't trigger this generation

so is there something I'm missing?

[barren stag]

ok, I fixed it with traefik wildcard certificate and wildcard rule for appwrite

obviously it won't automatically generate certs for custom domains, but I don't care at the moment

[simple wraith]

right..if you have cloudflare in front, you don't need appwrite to generate certs for you

[crude scroll]

Do you think a logic like this would be good -
Check for SSL challenge, if fails, check if the domain already has an active and valid SSL, show "SSL Active" and in the tooltip show - "SSL Cert was not generated by Appwrite, hence renewal is subject to your provider" or something like that?

I suggest this due to the fact if Appwrite fails ssl gen. its shows Failed, which is fine but on the other a site might have a valid ssl.

[simple wraith]

Possibly...

[barren stag]

well, the error I posted here actually says otherwise, generation fails but UI still says it's good

fix for my particular case with cloudflare would be to support tls-alpn challenge at least, or even better, dns challenge, but since everything is custom in appwrite, maybe it's not a priority now

gosh I wish I programmed in php so I could extend it myself...