[Feature Request] Specify Cert Resolver per resource #1364

New Issue

MrUnknownDE · 2026-04-05T19:13:33+02:00

MrUnknownDE commented

2026-04-05 19:13:33 +02:00

Originally created by @HWiese1980 on 6/11/2025

I am using Pangolin to route my internal and external domains.

For domains configured through Pangolin, it seems the internal Traefik uses a default cert resolver (which is, as usual, Let's Encrypt for me). The problem is that Traefik also tries to issue certificates for all internal subdomains (*.mydomain.internal) and fails because Let's Encrypt does not allow it.

I have a local step-ca configured to issue self-signed certificates. That works for routers that I explicitly configure in Traefik's dynamic config, however, not for resources configured by Pangolin through the API.

I would like to be able to explicitly specify a cert resolver in the Pangolin frontend for specific resources. Either on resource level or - if possible - even on site level (which would be more convenient and would also give sites a little more to do).

*Originally created by @HWiese1980 on 6/11/2025* I am using Pangolin to route my internal and external domains. For domains configured through Pangolin, it seems the internal Traefik uses a default cert resolver (which is, as usual, Let's Encrypt for me). The problem is that Traefik also tries to issue certificates for all internal subdomains (*.mydomain.internal) and fails because Let's Encrypt does not allow it. I have a local step-ca configured to issue self-signed certificates. That works for routers that I explicitly configure in Traefik's dynamic config, however, not for resources configured by Pangolin through the API. I would like to be able to explicitly specify a cert resolver in the Pangolin frontend for specific resources. Either on resource level or - if possible - even on site level (which would be more convenient and would also give sites a little more to do).

MrUnknownDE closed this issue

2026-04-05 19:13:33 +02:00

Sign in to join this conversation.

Branches Tags

main

dev

dependabot/npm_and_yarn/dev-minor-updates-b4e5d6b9c5

revert-2766-feature/systemd-install-instructions

dependabot/npm_and_yarn/prod-patch-updates-05702d39f2

dependabot/npm_and_yarn/next-16.2.1

dependabot/npm_and_yarn/recharts-3.8.1

alerting-rules

private-site-ha

dependabot/docker/docker/library/node-25-slim

ssh

delete-account

msg-delivery

org-only-idp

cicd

patch

site-targets-auto-login

No Label

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/pangolin#1364