Automatically issue Let's Encrypt SSL certificates for all your custom domain names in Azure.
Existing solutions (Let's Encrypt Site Extension, Let's Encrypt Webapp Renewer) work well but are target at Azure App Services only.
This solution also enables Azure CDN based domains to use Let's Encrypt certificates (Azure CDN is needed if you want a custom domain name for your static website hosted via azure blob storage).
If you want to know how to setup an Azure CDN based website backed by Blob Storage, read my blog post.
The function runs on a daily schedule and automatically renews all certificates that are close to expiring (based on a configurable threshold). In such a case the function will issue a new certificate for the app service/CDN and automatically configure it.
- automated Let's Encrypt certificate renewal for
- Azure App Service
- Azure CDN
- securely store certificates in keyvaults
- cheap to run (< 0.05$/month)
The function runs every day. In case of an error it will simply retry the next day (Let's encrypt also recommends running the renewal daily). If you would like to be informed of any errors you can set up an azure alert to monitor exceptions in the application insights instance (e.g. exception > 0) and have an email/notification delivered to you.
In the worst case (complete failure of the function for a long time) Let's Encrypt will also send out emails to the domain owners days before the actual expiry.
See Setup.
Changelog is here.