Skip to main content

SSL

Meli is built on top of Caddy. Hence, it natively supports automatic SSL certificate issuance and renewal. By default, it uses LetsEncrypt, but Meli can obtain SSL certificates from a certification authority (CA) using the ACME protocol.

Test with Let'sEncrypt staging environment#

Let's Ecnrypt production rate limits leave small room for error. Hence, we recommend using their staging environment to start off. All you need to do is to set:

MELI_ACME_SERVER=https://acme-staging-v02.api.letsencrypt.org/directory

Using a custom ACME server#

If you want to use a custom another CA:

# The URL to the ACME directory, here is an example
MELI_ACME_SERVER=https://acme-staging-v02.api.letsencrypt.org/directory
# Optionaly, if using a private ACME server, you should specify:
MELI_ACME_CA_PATH=<path to the CA certificate in the Caddy container>