HTTPS is a baseline requirement for modern sites. veilx supports issuing and renewing free certificates automatically via the ACME protocol, so you can enable encrypted access without manually buying or uploading certificates.
Why HTTPS
HTTPS encrypts traffic between visitors and your site, preventing eavesdropping or tampering. It's also a browser trust signal and a prerequisite for SEO and many modern features. Once enabled, pair it with "Force HTTPS redirect" to automatically upgrade all HTTP access to HTTPS.
Automatic ACME issuance
Choose automatic certificates under the site's "Certificates", and veilx requests a certificate from a certificate authority via ACME. The whole flow — request, issuance and deployment to edge nodes — completes automatically, usually taking effect within a few minutes.
Domain validation methods
Before issuance you must prove you own the domain. Two common methods:
- HTTP validation: place a validation file under the domain for the CA to check. Requires the domain to already resolve to veilx.
- DNS validation: add a specified TXT record in the domain's DNS. Good for wildcard certificates or domains not yet switched over.
Automatic renewal
ACME certificates typically have short validity, and veilx renews and redeploys them automatically before expiry, with no manual work. As long as the domain validation conditions keep holding (resolution intact, TXT record kept), the certificate stays valid.