Hello new here, needing advice on how to use LetsEncrypt on Univention as SSL reverse proxy for other windows servers one IP address, private local domain with FQDN domain routed from UCS server to one other windows server IIS7

[fbartels]

@CS100000000000000000

Another question I have, is how much load the redirect might put on the univention server (i5 2400, 24GB RAM) given mild traffic say 10-20 users per day

A reverse proxy does not take up a lot of resources, so this should be fine.

@CS100000000000000000

I could just elect to purchase a wildcard certificate from something like SSL.comodo and have it to upload in both servers?

Yes, sure a wildcard certificate could be installed on multiple servers. the only thing that matters is that the domain you try to access in in the list of domain names of the certificate.

@CS100000000000000000

and these icons would just continue to show the underlying domain name.

Sorry, never had this challenge so I cannot say how this can be changed.

@CS100000000000000000

But will Univention still see itself as secure even though the private domain name is not included on the SSL?

Its not Univention (the server) that will mark the website as secure or insecure, its just the browser. and for this the accessed domain needs to be included in the ssl certificate.

@CS100000000000000000

And does this wildcard certificate need to be placed in the base Univention directory

this will probably get you further along Using your own SSL certificates