Hi, this is not actually a problem with GeoIP, but with Let's Encrypt, they are very unflexible about users that use any kind of geoblocker, 'cause for renewing their certificated they use a domain that change of IP often, and they don't want to say what is the pool or list of public IPs they use to add them to the whitelist, they only say to users that don't use geoblocker directly and allow all traffic. The only exception to this was a more moderate solution that is allow all traffic but only to: /.well-known/acme-challenge/
Is this posible todo using geoip-shell? If not, geoip-shell allows you to whitelist a domain instead of an IP? (I haven't tried it yet) If any of that is not posible, there's not problem, I still can temporally disable the geoblocking so the service can renew the certs, something that fortunately is not so often, but I will prefer to leave it full automatic, so any solution on or outside of geoip-shell is welcome :)
Hi, this is not actually a problem with GeoIP, but with Let's Encrypt, they are very unflexible about users that use any kind of geoblocker, 'cause for renewing their certificated they use a domain that change of IP often, and they don't want to say what is the pool or list of public IPs they use to add them to the whitelist, they only say to users that don't use geoblocker directly and allow all traffic. The only exception to this was a more moderate solution that is allow all traffic but only to:
/.well-known/acme-challenge/Is this posible todo using geoip-shell? If not, geoip-shell allows you to whitelist a domain instead of an IP? (I haven't tried it yet) If any of that is not posible, there's not problem, I still can temporally disable the geoblocking so the service can renew the certs, something that fortunately is not so often, but I will prefer to leave it full automatic, so any solution on or outside of geoip-shell is welcome :)