Make TLS easy

[xylo04]

I'd like to use Let's Encrypt to make serving websockets with TLS easy, but I don't know if LE can support local, non-registered DNS names.

[xylo04]

I was able to get a Let's Encrypt certificate using their dns-01 challenge by following this tutorial. This method requires a domain name, but can be done without exposing the host to the internet.

sudo certbot certonly --manual --manual-auth-hook /etc/letsencrypt/acme-dns-auth.py --preferred-challenges dns --debug-challenges -d hampi4.xylo04.net

An enhancement would be to enable a name server API call do do automatic renewals since the certificates expire. Looks like the current renewal cadence is 3 months.