certify VS keyvault-acmebot

Option 2+: If your public DNS is hosted by a provider that has Win-ACME or Certify the Web support, use Let's Encrypt and automate the whole thing.

I use certify the web for the rd gateway

For Exchange and Remote Desktop Service we are using Certify The Web with Lets Encrypt. Works really well.

Certify the Web: https://certifytheweb.com/

https://certifytheweb.com Felt like a complete bait-and-switch to me.

If you're managing Windows Servers and need certificates on them, ditch what you're doing and get this: https://certifytheweb.com

It's worth doing! A few projects I've done:

I once needed a database of EV charging locations, but at the time(2011) there were no open databases, so I built https://openchargemap.org, that now serves millions of API queries per month for other apps and services

For another project, I recently wanted to control my guitar amp (a Positive Grid Spark) from my computer instead of using a mobile app, so I built https://soundshed.com which is both a bluetooth web app and an electron app you can install. It now has a few thousand users :)

And finally, another time I had some SSL certificates I needed to manage for another project (for the above mentioned https://openchargemap.org), so I built a GUI to manage and renew certificates on Windows. It's now a commercial app with hundreds of thousands of users and it's my full time job: https://certifytheweb.com

So yeah, worth doing!

I used the following stack to generate and sync my certificate : Generation of certs to Keyvault : https://github.com/shibayan/keyvault-acmebot Keyvault cert to AKS sync : https://akv2k8s.io/

So far I've been able to set up Keyvault Acmebot, and that seems to be working very well, but the piece that's eluding me is a functional gRPC reverse proxy. Is there a set of tools in Azure that can handle this?

I’ve used https://github.com/shibayan/keyvault-acmebot before and loved it if you can stand the occasional click ops.

App Gateway does have manual certs, yes, but it can do redirection (HTTP 30x). I've used it personally with keyvault-acmebot to handle Let's Encrypt certificates and renewals.

If you happen to be using things in Azure already (or are okay with adding a few), I've found this solution to be very useful https://github.com/shibayan/keyvault-acmebot as it just drops the certificates in Azure KeyVault and keeps them updated.

I use this in production at my job and love it: https://github.com/shibayan/keyvault-acmebot

Really you should automate this process. I suggest keyvault-acmebot https://github.com/shibayan/keyvault-acmebot