github.com/drud/ddev@v1.21.5-alpha1.0.20230226034409-94fcc4b94453/docs/content/users/extend/custom-tls-certificates.md (about)

     1  # Custom TLS Certificates
     2  
     3  It’s possible to use “real” TLS certificates issued by a CA rather than the local-development-oriented `mkcert` command.
     4  
     5  1. Obtain a certificate and key from Let’s Encrypt or another source.
     6  2. Install the certificate and key in your project’s `.ddev/custom_certs` directory.
     7     * If you’re using the default router, each certificate must be named with the pattern `fqdn.crt` and `fqdn.key`. A project named `example.ddev.site`, for example, would need `example.ddev.site.crt` and `example.ddev.site.key` in `.ddev/custom_certs`. There must be one cert-set for each FQDN handled by the project.
     8     * If you’re [using Traefik](../configuration/experimental.md#traefik-router), the files should be named `<projectname>.crt` and `<projectname>.key`, for example `exampleproj.crt` and `exampleproj.key`.
     9  3. Run [`ddev start`](../usage/commands.md#start) and verify using a browser that you’re using the right certificate.