Certificate management in Lagoon

amazee.io supports Let's Encrypt certificates by default, and we recommend using these over custom certificates where possible due to the automation provided.

Let's Encrypt is a non-profit certificate authority run by Internet Security Research Group that provides X.509 certificates for Transport Layer Security (TLS) encryption at no charge.

We use cert-manager to handle Let's Encrypt certificates. We only support challenges that use HTTP01 only. Unfortunately we arent't able to support DNS01 challenges.

Let's Encrypt is enabled by default for all routes, see lagoon YAML Configuration on how to disable.

If you'd like to use your own Custom Certificates, please get in touch with our Support team to find out more details.