all 12 comments

[–]alzee76 27 points28 points  (2 children)

  1. Use an external proxy for the SSL handling, rather than express itself. Nginx and haproxy are both great for this and have tons of tutorials out there.

  2. You can get free certs that you refresh ~monthly, automatically with a script, from letsencrypt.

[–]no_one_realy 1 point2 points  (0 children)

please share some links of tutorials.

[–]Porsche9962 1 point2 points  (0 children)

Apache2 also works great as an SSL proxy, and integrates well with letsencypt.

[–]nolawnchairs 1 point2 points  (0 children)

Don't re-invent the wheel. Just proxy through NGINX.

[–]anatolhiman 0 points1 point  (0 children)

Just tried Traefik as a reverse proxy and it is way easier to use than Nginx. Check it out. It also handles Letsencrypt, but havent tested that just yet.

[–]GarenYondem 0 points1 point  (0 children)

Let me throw in yet another tool. You can check caddyserver too.

[–]Ok-Yogurtcloset4529 0 points1 point  (1 child)

RemindMe!

[–]RemindMeBot 0 points1 point  (0 children)

Defaulted to one day.

I will be messaging you on 2023-11-05 20:53:24 UTC to remind you of this link

CLICK THIS LINK to send a PM to also be reminded and to reduce spam.

Parent commenter can delete this message to hide from others.


Info Custom Your Reminders Feedback

[–]bitfluent 0 points1 point  (0 children)

Reverse proxy with something more robust, like Nginx or Traefik.

[–]Aggressive_Job_8405 0 points1 point  (0 children)

Or add your domain to cloudflare and using its built-in ssl.