This is an automated archive made by the Lemmit Bot.

The original was posted on /r/selfhosted by /u/acesofspades401 on 2025-01-19 13:35:38+00:00.

I have a small homelab, just a couple of services like gitea, Jellyfin, and a static site hosting some writing of mine. Each service gets a unique ssl certificate generated for it, but is this the way to go? Would a wildcard certificate be a smarter and safer choice? None of the services are publically accessible without connecting through WireGuard, but I still feel a certain way seeing each domain listed in crt.sh. Any input is appreciated, thank you!