I have an issue I am trying to resolve. My PBS server has multiple interfaces, one network is a 40GB for local backup traffic that is on 10.40.40.xxx and then it has a public IP for the web interface with an LE Certificate. The problem I have is each time the LE Certificate renews, the Fingerprint changes, causing backups to fail. The Proxmox VE servers all use a private IP 10.40.40.xxx Address with the fingerprint key because the domain doesn't match. I want traffic going over the local 40GB network.
My thought was to modify the hosts files of each Promox VE server to put a static entry in the table for the public domain mapped to the private IP. Does this seem like the best way? Then I can use the domain name that Let's Encrypt uses without using the Fingerprint. Or is there a better way to handle this? Is it possible to make PBS use no fingerprint on a private LAN?
My thought was to modify the hosts files of each Promox VE server to put a static entry in the table for the public domain mapped to the private IP. Does this seem like the best way? Then I can use the domain name that Let's Encrypt uses without using the Fingerprint. Or is there a better way to handle this? Is it possible to make PBS use no fingerprint on a private LAN?
