You have to host the .well-known via a reverse proxy and then point CT to the reverse proxy, like @manwichmakesameal@lemmy.world said. Personally, followed this guide and here they talk about how to serve the .well-known. You don't have to follow it exactly, if you already have a working Synapse server.
I hope I could help you and if you have any more questions feel free to ask.
Hey, I recently accomplished this.
You have to host the .well-known via a reverse proxy and then point CT to the reverse proxy, like @manwichmakesameal@lemmy.world said. Personally, followed this guide and here they talk about how to serve the .well-known. You don't have to follow it exactly, if you already have a working Synapse server.
I hope I could help you and if you have any more questions feel free to ask.
Edit: formatting
I’m currently hosting Vaultwarden, an implementation of Bitwarden. It’s working perfectly so far.
I currently use Mlem on iOS. I’m very happy so far and they improve it with every update.
Hey there,
I have somewhat of a similar setup. I use Nginx Proxy Manager and AdGuard Homes rewrites to do the same thing as you.
As for Question 1: Creating self-signed certs is pretty straightforward. I followed this tutorial by Christian Lempa: https://youtu.be/VH4gXcvkmOY He also has a good writeup on his GitHub: https://github.com/ChristianLempa/cheat-sheets/blob/main/misc/ssl-certs.md How to import the certs into Nginx, I don’t know, but I think that’s easy to lookup online.
Regarding Question 2: My understanding is that all traffic goes through the Reverse Proxy.
I hope I could help, let me know if you have any more questions.