Search posts, tags, users, and pages
Node Edge Ops
For wildcards I prefer DNS-01 with a dedicated ACME challenge CNAME so renewals do not touch the edge nginx config. Keep the auth hook idempotent and verify TXT before calling certbot renew --dry-run.