Allow uploading a custom SSL certificate directly from the Add Domain form
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 37.4k
- Forks
- 3k
- Avg merge
- 1d 3h
- Merged PRs (30d)
- 73
Description
What problem will this feature address?
Currently, users who want to use a custom SSL certificate must first navigate to the Certificates section, add the certificate and private key there, and then return to the domain configuration.
This makes the process unnecessarily complicated, especially when the certificate is only intended for a single domain. It is also not always clear how a custom certificate should be assigned to a specific domain.
Since configuring a custom SSL certificate only requires the certificate/full chain and the private key, it would be more convenient to provide these fields directly in the Add Domain and Edit Domain forms.
Describe the solution you'd like
Add a new SSL option called Custom Certificate to the Add Domain and Edit Domain forms.
When this option is selected, display two fields:
- Certificate / Full Chain
- Private Key
After the domain is saved, Dokploy should securely store the certificate and automatically configure Traefik to use it for that domain.
The certificate name could be generated automatically from the domain name, so the user would not need to create and manage a separate certificate entry manually.
It would also be helpful to validate that the certificate and private key are valid before saving.
Describe alternatives you've considered
The current workaround is to create the certificate separately in the Certificates section and then try to assign it to the domain.
Another alternative is to configure the certificate manually through Traefik, but this requires additional technical knowledge and may be harder to maintain after Dokploy updates.
Both approaches involve more steps than necessary for a certificate that is only intended for a single domain.
Additional context
This feature would be especially useful for:
- Cloudflare Origin CA certificates
- Wildcard certificates
- Certificates purchased from third-party certificate authorities
- Internal or private CA certificates
- Users migrating existing certificates to Dokploy
The custom certificate could still be stored internally using Dokploy's existing certificate management system. The main request is to make it possible to enter and assign the certificate directly from the Add Domain or Edit Domain form.
Will you send a PR to implement it?
No
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by tracing the Add Domain and Edit Domain forms, then read the existing Certificates section and the code that configures Traefik for a domain. Check how certificates are stored and assigned today before determining the entry points for the new Custom Certificate option. Done means both forms accept a certificate/full chain and private key, validate them, securely store them, and configure the selected domain.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- devops, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100