NginxProxyManager / NginxProxyManager/nginx-proxy-manager

Support custom / internal ACME CA using HTTP-01 challenge

Open
#5,193 3 comments 14 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement
Dominant language
TypeScript
Stars
34.2k
Forks
3.9k
Avg merge
21h 12m
Merged PRs (30d)
20

Description

Is your feature request related to a problem? Please describe.
Nginx Proxy Manager only supports Let’s Encrypt as an ACME provider and does not allow configuring a custom ACME directory URL.
This prevents using NPM with an internal or private ACME CA, even when the CA supports the standard HTTP-01 challenge.

Describe the solution you'd like
Add support for a custom / internal ACME CA with:

  • Ability to configure a custom ACME directory URL
  • Ability to trust a custom root/intermediate CA
  • Support for HTTP-01 challenge for certificate issuance and renewal

Describe alternatives you've considered

  • Generating certificates externally using an ACME client and importing them as “Custom Certificates” in NPM
  • Using a different reverse proxy that supports custom ACME CAs

Additional context
This would enable fully automated certificate management in homelab and private environments without relying on Let’s Encrypt.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

The issue names no files, tests, or entry points. Start by locating the existing Let's Encrypt ACME configuration and HTTP-01 issuance and renewal flow, then trace how certificate authority trust is configured. Done means a custom directory URL and custom root or intermediate CA can support automated HTTP-01 issuance and renewal.

Written by the indexing model from the issue text.

Assessment

Tech stack
nginx, typescript
Domain
infrastructure, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.