+++
title = "ACME / letsencrypt"
categories = [ "domain", "https", "ssl", "tls", "Certificates" ]
+++


# Usage

We use the ACME module's nginx integration for basically everything. Beware of
rate limits when redeploying lots of things at once! Let's Encrypt is a little
picky about those.


## Workarounds & peculiar configuration choices

Certs live under `/var/lib/acme/`

If you need to remove a cert for whatever reason, be aware that there is a
hidden `.lego` folder, that contains state as well