How do I enable SSL for a Netbird peer’s domain name?

[Yalab7]

Describe the problem

I've set up Netbird to access my homelab services when I'm away from home, but whenever I access one of my services using the peer domain name (e.g., service.netbird.selfhosted), my browser marks the connection as insecure because it's using HTTP instead of HTTPS.
Is there a way to enable SSL/TLS for the private domain provided by Netbird?

Are you using NetBird Cloud?

No, self-hosted

NetBird version

0.60.4

Is any other VPN software installed?

no

Screenshots

Additional context

I viewed the Netbird DNS documentation but couldn't find anything on this topic.

[1nerdyguy]

This is something you'd need to configure on your web host.

Do you have a cert configured for listening on the Netbird FQDN in Nginx?

[Yalab7]

Hello @1nerdyguy,

I do have a cert configured for my self-hosted Netbird server which resides in a public VPS, but I don’t have certificates for my homelab services. Since those services only have Netbird private DNS names (like service.netbird.selfhosted) and no public domain

Is it possible to use my Netbird server to generate certificates for these private peer domain names?

I followed the quickstart guide to install Netbird which uses Caddy for reverse proxy

[1nerdyguy]

You're misunderstanding this on a fundamental level.

Netbird isn't involved in this at all.

Whatever nginx instance you're utilizing as shown in your screenshot needs to be configured to utilize SSL. THis can be done with self signed certs, a PKI environment, pay for certs, whatever.

All netbird is providing is the connectivity between the hosts, this is firmly at the service you have listening on the recipient.

No, it's not possible to use Netbird to generate certs for you to provide out to other services. Netbird is not a PKI.

[Yalab7]

Thank you, this clears things up.

I've been able to do it manually by buying a domain and setting up the cert using Let's Encrypt DNS-01 instead of HTTP-01