This question(s) might sound naive to many of you, but I'm more of a developer than a sysadmin, so it'd be extremely useful to have some advice before digging in.
Let's say I own the foobar.com
domain for my public sites and need to generate a Let's Encrypt certificate for my internal servers too:
Can I use the
foobar.com
domain (eg.myInternalServer1.foobar.com
)?Otherwise, does it need to be a real second level domain, like
baz.com
, or can I use a subdomain of my actual domain, likeintranet.foobar.com
(eg.myInternalServer1.intranet.foobar.com
)?If I'm not mistaken, I should somehow instruct my main DNS server to handle
foobar.com
, and set up another DNS server to handleintranet.foobar.com
, is it correct?While I'm the owner of
foobar.com
, that's currently used only for the public sites; the whole "intranet" runs underfoobar.local
. I've read that since a couple of years that way is deprecated. Should I changefoobar.local
withintranet.foobar.com
in the main DNS server to make the Let's Encrypt thing work, or it's only a suggestion? Everything is based on that (Active Directory, etc) so I guess it's not an easy migration, right?
Thank you in advance