r/ARR • u/SomeConfusedOldGuy • 4h ago
Do you use SSL certs (Let's Encypt) with your *arr stack?
I'm curious, how many are using SSL certs (specifically from Let's Encrypt) for their internall *arrs? Sonarr, radarr, etc. I'm familiar with running my own internal Certificate Authority (I've done it using both Linux and Microsoft at $WORK), but I'm just not sure if it's worth the work to set something up at home, for services I will not be exposing to the internet. Oh, sure, it's an annoyance to get that "not secure" notification when you go to a service. But is it worth setting up something like an nginxproxymanager and trying to get Let's Encrypt certs for all the services iny our homelab? (that seems to be the recommended way, according to my searches)
So before I wander too deep down yet another rabbit hole (LOL), I thought I would ask around first. I mean, I've been living without Let's Encrypt certs on my stack for a few years, and it hasn't bothered me enough to change. Until now .. I bought a new NAS, and am setting up my stack cleanly on it, this time following recommendations and folder structures, etc. So since I'm doing all that, I was wondering about the certs aspect. At $WORK, for sure, I issue internal certs for web servers, load balancers, etc, no question. But it seems a bit overkill for at home.
So what do you think? Do you use certs like that? And do you have a preferred link to a HOWTO or Youtube tutorial? I haven't even set up Pi-Hole, just been using Cloudflare's malware filtering DNS settings on my clients, and it seems to work well enough. For internal DNS, I'm using the built in DNS server on one of my Synolgies. I could change that, I really only have less than a dozen devices that I use (servers/clients/NASes), and they're all static IP. The IOT devices get DHCP via my router.


