forward SSL proxy for tracking domains

[d3m0n]

Hello Community,

i am currently trying to solve a task that might be already solved )
i have a domain track.domain.com that is pointing to my dedicated mailwizz server

i have multiple costumers that would like to set a tracking domain directly at their registrar , like namecheap or godaddy
when they point their domain with open.domain2.com CNAME track.domain.com the connection is not secure.

there are two options to move their domain to CDN like Cloudflare and enable proxy ssl there or for me generate and install SSL for every tracking domain a user implements.

when scaling to 100+ domains two options become incovenient.

i am exploring a third option of creating a forward SSL proxy for all the the thrid party tracking domains to obtain SSL when forwarded to our track.domain.com

Any advices are welcome

Thx

 

[twisted1919]

Or you can use a webserver like Caddy that would generate your SSLs on the fly

 

[d3m0n]

@twisted1919 i am checking this option https://doc.traefik.io/traefik/

 

[dreyerretief]

I am using to virtualhost alias and letsencrypt to achieve this. The client just needs to point a CNAME to us.

 

[d3m0n]

what if you need to set 500+ tracking urls?

 

[dreyerretief]

what if you need to set 500+ tracking urls?

There will always be setup involved as the CNAME will need to be setup, you can use haproxy to handle the certificates. However any option you choose you are going to need do some work to get the certificates generated. I simple bash script would be able to generate the certs with one command..