TLS certs on goatcounter.com hosted service have expired (09-Apr-2024 23:59:59 GMT) about goatcounter HOT 5 CLOSED

I renewed it last week; not sure why it's not working 🤔 I'll check in a minute.

from goatcounter.

Maybe use https://caddyserver.com/ which would automatically take care of certificate renewal.

Actually, it wouldn't. The problem here is that a *.goatcounter.com wildcard certificate is needed for the code.goatcounter.com domains, and that requires dns-01 verification: it reads a token from _acme_challenge.goatcounter.com. To do this automatically I need to set this with some API at the domain registrar, but I also don't want to leave API keys that give it full access to my account leaving around on servers, as that gives the keys to the castle.

I actually switched to Cloudflare because from the docs it looked like I could scope that to just a single record, but I wasn't able to get that to work, so idk.

And having to spend 2 minutes every few months is not really that big of a deal. I don't know what went wrong, but I ran it again and it works now.

from goatcounter.

Seconding this issue. Can't access site due to expired certificate.

from goatcounter.

I also can't access the website - running Firefox 124.0.2 (64-bit) on Linux Mint 21.2 Cinnamon

from goatcounter.

I'm experiencing the same. Side note: Maybe use https://caddyserver.com/ which would automatically take care of certificate renewal.

from goatcounter.