Enable https for pasword managers with internal generated certificates

[NerosKi]

I would like to convert my inventree server to use https instead of http so password managers work. It only needs to be accessed on the local network. I managed by adding to

.env

INVENTREE_SITE_URL="https://inventree.home.com"
INVENTREE_USE_X_FORWARDED_PROTO: true
INVENTREE_TRUSTED_ORIGINS: "https://inventree.home.com"

and adding tls internal to the Caddyfile.

This worked and the first time I accessed it with a browser I got the warning that the certificate was not trusted but can trust it anyway and that is fine. However after a docker restart I think the certificates changed or something because all devices that trusted it already, can no longer access the site. New devices could do it fine. I have no knowledge about most of this networking stuff but what should I change?

[matmair]

The internal certs roll over, I would strongly recommend using something like let’s encrypt or a proper internal pki

[NerosKi]

Again, I don't know a lot about this, but since I don't want my server publicly reachable, can I use let's encrypt? I thought for that the ports need to be open. I don't really care how it is done, I just want the https connection so password managers function.

[miggland]

You can use challenge-response with DNS instead, you don't need the server reachable, but you will require a domain you control.