I have multiple domain names, currently all of them are on a single SSL certificate through Lets Encrypt.
However I would like to break them off and get individual certificates for each domain. The problem I’m running into, and what I’m hoping to accomplish is this:
I have several subdomains that are being reverse proxied. IE sd1., sd2., sd3.*, etc. At the moment this works fine while having a single certificate for all domains. Regardless if someone accesses sd1.domain1.com or sd1.domain3.com it uses the single certificate and all is well.
I’m trying to find out if it’s possible / the proper way to have the certificate be handled by the domain requested without having to create server blocks for each subdomain / domain combination.
I’d like to keep sd1.* as a server block for the reverse proxy but if sd1.domain1.com is accessed have it provide the domain1 certificate and if sd1.domain2.com is accessed have it provide the certificate for domain2.
Is it possible to have NGINX provide the certificate based on the host/URI that is requested rather than only by server block?