Finally Move to Clustering...Question on HTTPS Web UI

[ChrisColotti]

Took me awhile to get around to it and I realize DHCP is not there yet, but it was rather easy to move my two current servers into a cluster. Thanks for all the hard work!

One question for folks. Has anyone built a decent "how to" document to setup and use LetsEncrypt certs on the HTTPS web ports? Since clustering enables that by default it's fine I used the self signed, but if anyone has a decent guide to use LE and update them automatically within this server i'd love to give it a read.

Thanks!

[ShreyasZare]

Thanks for asking. Setting up SSL cert for the DNS server works just the same if you have clustering enabled or not. You need to use something like certbot to manage cert renewal and have a script to convert the renewed cert to pfx file. Just configure the pfx file path in the Settings > Web Service section and the DNS server will update the clustering to use the new cert automatically.

When the cert renews, the old pfx file should get replaced with then new one. The DNS server will automatically pick up the changes and reload the new cert.