Back

Functions and Let's Encrypt certificate request

  • 1
  • Self Hosted
  • Functions
NeKo
13 Dec, 2023, 16:14

I have just one question regarding certificate generation. When I create a domain for a function, I do not observe any job requests in the logs of the appwrite-worker-certificates.

Therefore, I always find myself needing to manually force the generation of a certificate. I do this using the following command:

TypeScript
docker compose exec appwrite ssl domain="my-test.functions.dev.example.com"

For your reference, here is my environment setup:

TypeScript
_APP_DOMAIN=aw.dev.example.com
_APP_DOMAIN_FUNCTIONS=aw-fnct.dev.example.com
_APP_DOMAIN_TARGET=aw.dev.example.com

Could you clarify under what conditions or scenarios the certificate generation is automatically triggered?

TL;DR
The user is inquiring about the creation of Let's Encrypt certificates for custom function domains. They mention that only self-signed certificates are being generated in their configuration. The user asks if they need to manually create a Let's Encrypt certificate to achieve the desired result. The support team confirms that by default, Let's Encrypt certificates are not automatically generated for custom function domains and need to be created manually. The user also asks under what conditions the certificate generation is automatically triggered, but no response is given in the thread. Solution: To generate a Let's Encrypt certificate for a custom function domain, the user needs to manually create it using the command
Drake
13 Dec, 2023, 21:17

ya...by default, certificates don't get generated automatically for those

NeKo
13 Dec, 2023, 23:45

Okay, thanks. So, just to make sure I've got it right: If I add a new domain as an entrypoint to execute my function from a URL (2), appwrite-worker-certificates service will only produce a self-signed certificate in this case and I need to create a Let's Encrypt certificate myself to achieve what's described in line (3)?

Drake
14 Dec, 2023, 00:13

if you create a custom function domain, it should create a certificate. The auto generated domain won't have a cert

NeKo
14 Dec, 2023, 01:23

self-signed or Let's encrypt one? On my configuration, only a self-signed is generated not a Let's encrypt. Btw the main domain certificate was generated without problem. My appwrite dashboard is protected.

NeKo
14 Dec, 2023, 01:27

Just to go back to your response, I need to understand if you create a custom function domain, it should create a Let's Encrypt certificate. or if you create a custom function domain, it should create a Self-Signed certificate.

Drake
14 Dec, 2023, 02:15

if you create a custom function domain, it should create a Let's Encrypt certificate.

NeKo
14 Dec, 2023, 02:32

Ok then, my setup has an issue. I will investigate it tomorrow. Thanks for your clarification.

Reply

Reply to this thread by joining our Discord

Reply on Discord

Need support?

Join our Discord

Get community support by joining our Discord server.

Join Discord

Get premium support

Join Appwrite Pro and get email support from our team.

Learn more