https://utube.ro/videos/watch/b46314af-56af-4042-b697-308e965f6fbf In the last video, we set up .local domains for accessing the homelab without IP addresses and ports, and a lot of you had great feedback about potential mDNS conflicts and how impractical deploying a root certificate really was. This video is the follow-up: using a real domain, a DNS challenge, and Nginx Proxy Manager to get a wildcard SSL certificate that works everywhere, no custom certificate authority to install on every device. We'll cover the actual working setup first, then build the whole thing from scratch on a brand new domain, including generating a scoped Cloudflare API token, requesting a wildcard certificate through a DNS challenge, and proving that everything stays local-only even when tested through a VPN from outside the network. Domains used in this video were purchased through Porkbun, not sponsored, just a service I've used for a long time. Timestamps 0:00 Intro and recap of the .local domain video feedback 1:26 Current setup walkthrough: npm.dbtech.app 2:04 Proxy hosts overview and load speed comparison 2:43 Certificate details: Let's Encrypt, expiration, renewal preview 3:08 Proving it's local-only: ping test showing private IP 3:56 Starting from scratch on a new domain 4:07 Cloudflare overview 4:16 NPM's supported DNS providers list 4:49 Domain purchase recap: dbtech.lol via Porkbun 5:43 Pointing nameservers from Porkbun to Cloudflare 6:09 Generating a scoped Cloudflare API token 7:40 Adding the token into NPM 7:52 Requesting a wildcard certificate (*.dbtech.lol) 8:05 What happens behind the scenes: the DNS TXT challenge 8:56 Certificate issued 9:08 How automatic renewal works (with a live renewal demo) 10:00 Creating a proxy host (MeTube) and why it fails without DNS 11:07 Adding the wildcard A record in Cloudflare 11:56 Confirming it works 12:03 Second service test to rule out a fluke 12:54 VPN test: proving external access is blocked 13:37 Wrap-up and thanks /=========================================/ Get early, ad-free access to new content by becoming a channel member, or a Patron! ✅ https://www.patreon.com/dbtech ✅ https://www.youtube.com/channel/UCVy16RS5eEDh8anP8j94G2A/join All My Social Links: ✅ https://dbt3.ch/ Join Discord! ✅ https://discord.gg/M9J6hFq /=========================================/ ✨Ways to support DB Tech: ✅ https://www.patreon.com/dbtech ✅ https://www.paypal.me/DBTechReviews ✅ https://ko-fi.com/dbtech ✅ Cashapp: https://cash.app/$dbtechyt ✅ Venmo: https://venmo.com/dbtechyt ✨Come chat in Discord: ✅ https://dbte.ch/discord Tue, 14 Jul 2026 22:33:27 GMT https://validator.w3.org/feed/docs/rss2.html PeerTube - https://utube.ro https://utube.ro/lazy-static/avatars/888f68a5-dd7d-4b7f-b73d-9e288452fcb8.png https://utube.ro/videos/watch/b46314af-56af-4042-b697-308e965f6fbf All rights reserved, unless otherwise specified in the terms specified at https://utube.ro/about and potential licenses granted by each content's rightholder.