Overhaul webserver configuration guide

[YetAnotherGerrit]

Once available in the nginx packages of our supported distros we should update our documentation to use ACME instead of certbot:

https://www.heise.de/en/news/NGINX-receives-native-ACME-integration-10525873.html

[ralf401]

Sorry for the late reply. We already have the acme.sh configuration in the documentation for Let's Encrypt certificates (see Let's Encrypt tab in the docs).

But yeah, this will probably change with their new module. However, their documentation for this module is rather long. Maybe we should keep the current guide and just add a hint with a link to their docs in the first iteration. What do you think?

[ralf401]

Talked with @YetAnotherGerrit:

• Goal should be to make the documentation easier
• If possible, Certbot option can be removed
• Issue postponed for some months
• First step should be an investigation if all distros have the new Nginx version available with the module option

[ralf401]

@YetAnotherGerrit

I investigated a bit and it seems none of our supported distros provide the ACME module for Nginx in their default package repos. So the users either have to build it on their own or use Nginx's own repo for it. I'd suggest avoiding both, or do you think another repo is a good option?

If we don't go the external Nginx repo way, I suggest to keep both options for certificate generation, but restructure the page, reduce complexity and focus on a "happy path".

What do you think?

[YetAnotherGerrit]

Yes, I'm fine. In the long term, we want to focus on Docker anyway, and then its relevance will diminish.