GuildUSA Architecture

Appearance

SSL Certificates (15-Year CA) ​

GuildUSA utilizes Cloudflare Origin Certificates to eliminate the technical debt associated with 90-day Let's Encrypt / Certbot renewal cycles.

Architecture ​

Both the Production and Sandbox VPS instances are secured with a Wildcard Certificate (guildusa.com and *.guildusa.com) valid until May 2041.

Nginx Implementation ​

The certificates physically live on the servers at:

  • /etc/ssl/cloudflare/cert.pem
  • /etc/ssl/cloudflare/key.pem

If a new Nginx server block is created, it must point to these paths and explicitly utilize ssl_protocols TLSv1.2 TLSv1.3;. Certbot must not be run on these servers, as it will conflict with Cloudflare's strict proxy routing.