Skip to content
LLStack

SSL Certificates

Let’s Encrypt

Section titled “Let’s Encrypt”

LLStack uses acme.sh for automatic Let’s Encrypt certificate issuance and renewal.

  1. Ensure domain DNS resolves to your server IP
  2. Go to site details → SSL tab
  3. Click Issue Let’s Encrypt Certificate
  4. Domain validation and certificate issuance happen automatically

Auto-Renewal

Section titled “Auto-Renewal”

Certificates (90-day validity) are renewed automatically via cron.

Certificate Storage

Section titled “Certificate Storage”
/usr/local/lsws/conf/ssl/{domain}/
├── privkey.pem      # Private key
└── fullchain.pem    # Certificate chain

Manual Upload

Section titled “Manual Upload”

Upload PEM-format private key and certificate files for commercial certificates.

Force HTTPS

Section titled “Force HTTPS”

When enabled, all HTTP requests are 301 redirected to HTTPS.

SNI Support

Section titled “SNI Support”

Each site can use its own SSL certificate via SNI — multiple domains can share a single IP address.

Panel SSL

Section titled “Panel SSL”

The panel itself (port 30333) supports SSL with self-signed (default) or Let’s Encrypt certificates. Configure in Settings → Panel SSL.