So Proxmox is awsome! I have been using it for about 3 years now. I have to say it has been wonderful as it runs on almost anything. Also, it supports clusting and ceph. Heck, I may even start selling some VPS(Virtual Private Servers)'s on a separate fiber connection at my home utilizing Proxmox as the hypervisor. Anyway, that would really test it for me, but I have no time for that at this point.
Major Flaw Is Certs
Now, for 90 percent of use cases the default Proxmox will work. The difficulty is in DNS mode with Alias's.
That is, where a DNS server has a CNAME that is setup to redirect to a sub domain. See this post for more on this process. So, for now I am going to show a workaround that I am using. Suposidly, there is a fix for this on Proxmox. See this article for info on that workaround. At of now, I have not got this to work. So, enough, let get certs loaded that work for me.
Get the Certs Using SCP
Push or Pull, two ways to do this option. Any way that works in your position.
Push Example
pfSense Settings Example
Turn on "Write Certificates" in pfSense Acme Settings
ssh into Proxmox server
ssh root@pve5.ad.alshowto.com
cp /etc/pve/nodes/pve5/pve-ssl.pem /etc/pve/nodes/pve5/pve-ssl.pem.bck
cp /etc/pve/nodes/pve5/pve-ssl.key /etc/pve/nodes/pve5/pve-ssl.key.bckSSH into pfSense
change to /conf/acme directory
cd to /conf/acme
Since I am working in ad.alshowto.com; then, I need the key and fullchain from this dir.
scp real-ad.alshowto.com.fullchain root@pve5.ad.alshowto.com:/etc/pve/nodes/pve5/pve-ssl.pem
scp real-ad.alshowto.com.key root@pve5.ad.alshowto.com:/etc/pve/nodes/pve5/pve-ssl.key