After the Porkbun DNS plugin for Nginx Proxy Manager stopped working, my homelab Let’s Encrypt certificates no longer renewed automatically, so I now download certificate bundles directly from Porkbun and install them manually. Along the way there’s background on SSL, DNS challenges, and securing internal services that aren’t reachable from the public internet. The manual approach requires repeating the renewal process every 90 days...
