I run easy-rsa on a linux box. Just manually generate CSR’s and sign them via SSH.
And simply trust the CA cert in windows, linux and whatever extra places (normally firefox cert store).
Post the crl.pem to /var/www/html/ and let NGINX use that.
For most things public like plex or whatever i just use letsencrypt. Easy-rsa is really just for internal stuff like my NAS, VPN etc.
I have 3.
Dakboard above the fridge shows calendar and shared photo album. It also runs bluetooth and serves as a relay for Homeassitant and a few kitchen devices (ie: igrill mini probe for meat).
pikvm for a desktop
pikvm+ kvm for lab rack esxi servers.
the latter two also run tailscale and allow me to SSH proxy if needed as a back VPN/remote access utility.
There is also a 4th. It runs NUT/UPS tools for their network gear and a mail relay for alerting and also tailscale so I can proxy if necessary.
Since its tailscale etc. Only key based auth is allowed on these boxes.
I pay 95 for 400/12 and 1.2 TB. Count your blessings.
Possibly. What i was hearing seemed more like some weird DB/code gremlin thing. But I dunno. Literally never run it.
Also i think the deployment type was invovled. Maybe it was a docker specific thing??
I’ve been seeing them everywhere.
Those self service terminal at autozone? Pi’s.
Multiple threads people have mentioned random crashing, DB issues and nonsense/useless log outputs that don’t help find a cause and just require you to restore from backup.
No way I’d consider it for business use.
After the stability issues I’ve heard. I wouldn’t even consider nextcloud for my family at this point.
I have a router, switch and older access point preconfigured and ready to just plug in.
I have some basic documentation and a short list of folks to call, along with admin creds should anything need untangling.
But mostly it’s a rip and replace network. Ditch plex and get cable.
Google workspace is basically just gmail. You can pay someone to migrate it or abandon.
Copy them to the box. Sign them. Copy the cert file off the box back to the requester.