# Deploy let's encrypt cert from OPNsense to MIAB

**URL:** <https://discourse.mailinabox.email/t/deploy-lets-encrypt-cert-from-opnsense-to-miab/12813>\
**Category:** Help with Setup/Upgrade\
**Created:** [March 31, 2025, 10:02am UTC](https://discourse.mailinabox.email/t/deploy-lets-encrypt-cert-from-opnsense-to-miab/12813 "2025-03-31T10:02:50Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![stefan21](https://discourse.mailinabox.email/letter_avatar_proxy/v4/letter/s/e47c2d/32.png) [@stefan21](https://discourse.mailinabox.email/u/stefan21)\
**Post date:** [March 31, 2025, 10:02am UTC](https://discourse.mailinabox.email/t/deploy-lets-encrypt-cert-from-opnsense-to-miab/12813/1 "2025-03-31T10:02:51Z")

</div>

We’re using OPNsense as FW. OPNsense is taking care of certs and deploys to all boxes if necessary.

Is it possible to deploy to MAIB? And if so, what exact location the certs have to go for making MIAB to use them? This has to go automatically. I don’t want any manual intervention.

---

<div class="post-metadata">

**Author:** ![stefan21](https://discourse.mailinabox.email/letter_avatar_proxy/v4/letter/s/e47c2d/32.png) [@stefan21](https://discourse.mailinabox.email/u/stefan21)\
**Post date:** [April 2, 2025, 3:51pm UTC](https://discourse.mailinabox.email/t/deploy-lets-encrypt-cert-from-opnsense-to-miab/12813/2 "2025-04-02T15:51:50Z")

</div>

knock, knock… nobody?

---

<div class="post-metadata">

**Author:** ![KiekerJan](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/kiekerjan/32/2339_2.png) [@KiekerJan](https://discourse.mailinabox.email/u/KiekerJan)\
**Post date:** [April 2, 2025, 5:33pm UTC](https://discourse.mailinabox.email/t/deploy-lets-encrypt-cert-from-opnsense-to-miab/12813/3 "2025-04-02T17:33:43Z")

</div>

You can take a look at `management\ssl_certificates.py` on how certificates are installed. But why don’t you let Mail-in-a-Box do this using the built-in Let’s Encrypt functionality?

---

<div class="post-metadata">

**Author:** ![stefan21](https://discourse.mailinabox.email/letter_avatar_proxy/v4/letter/s/e47c2d/32.png) [@stefan21](https://discourse.mailinabox.email/u/stefan21)\
**Post date:** [April 2, 2025, 8:48pm UTC](https://discourse.mailinabox.email/t/deploy-lets-encrypt-cert-from-opnsense-to-miab/12813/4 "2025-04-02T20:48:27Z")

</div>

@KiekerJan

Thank you for hopping on.

Easy, because I’m lazy. One instance to cover all. No need to configure a call for certs on every box.

I’ll have a look. Thank you for your hint.

---

<div class="post-metadata">

**Author:** ![KiekerJan](https://discourse.mailinabox.email/user_avatar/discourse.mailinabox.email/kiekerjan/32/2339_2.png) [@KiekerJan](https://discourse.mailinabox.email/u/KiekerJan)\
**Post date:** [April 3, 2025, 6:07am UTC](https://discourse.mailinabox.email/t/deploy-lets-encrypt-cert-from-opnsense-to-miab/12813/5 "2025-04-03T06:07:59Z")

</div>

> [@stefan21](#):
>
> Easy, because I’m lazy

Then let MailinaBox handle it, it’s enabled by default, and running automatically. Seems the lazy way out to me 😜 you don’t have to do anything, as opposed to now, where you have to do things on your Opnsense router.

---

<div class="post-metadata">

**Author:** ![stefan21](https://discourse.mailinabox.email/letter_avatar_proxy/v4/letter/s/e47c2d/32.png) [@stefan21](https://discourse.mailinabox.email/u/stefan21)\
**Post date:** [April 5, 2025, 10:10am UTC](https://discourse.mailinabox.email/t/deploy-lets-encrypt-cert-from-opnsense-to-miab/12813/6 "2025-04-05T10:10:12Z")

</div>

> [@KiekerJan](#):
>
> Then let MailinaBox handle it

One central instance for all boxes. In case of any changes I don’t want to re-configure every box.

---

<div class="post-metadata">

**Author:** ![system](https://discourse.mailinabox.email/uploads/default/original/2X/4/4d0933d13c456b7e57f296aa6cc344525b6f0c70.png) [@system](https://discourse.mailinabox.email/u/system)\
**Post date:** [April 12, 2025, 10:10am UTC](https://discourse.mailinabox.email/t/deploy-lets-encrypt-cert-from-opnsense-to-miab/12813/7 "2025-04-12T10:10:53Z")

</div>

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.