Messages

I want to automate running the command "tailscale cert hostname.tsname.ts.net" in order to make sure that my certificate does not expire. Cron seems like an obvious place to trigger this....
I can't see an option in the cron settings for running a custom script. Is this not something that can be done in the UI?

Cheers

This guide will show you how to setup a reverse proxy with SSL from letsencrypt - but it will be for external access.

https://forum.opnsense.org/index.php?topic=23339.0

I've done this and it works well, but like you I have a couple of resources that I only want available internally, but I would like to have on SSL so I don't see any non-ssl browser warnings (and so that the browser will remember my password / enable autocomplete, which it won't do on non-ssl sites).

So looking for some help to add some local only domains but not sure where to start! I think I could set them up as in the guide above, but first create some firewall rules on the WAN interface to prevent inbound access to these domains (and add those rules above the allow rules for my other exposed domains...). Would that work?