What's Changed

Bug Fixes

• Fixed Technitium DNS integration on fresh Technitium v15+ Linux installations that run the service as a non-root user.
• local-https now ensures the Technitium dns-server account can access the certs group when present, while also supporting custom non-root Technitium service users.
• Improved Technitium systemd service detection.
• Added a systemd drop-in to give non-root Technitium installations read-only access to /etc/ssl/servercerts/server.pfx.
• Technitium is restarted only when certificate access settings need to be activated.
• Improved Technitium settings/set error reporting to show the error returned by the API.
• Fixed bootstrap behavior so interactive installations still show Pi-hole deployment and auto-renew method prompts.
• Legacy Technitium installations that still run as root remain supported.

Installer & Update Flow

• Added local-https --update to check GitHub for a newer version and update the installed command.
• Added local-https --update --yes for non-interactive updates.
• The updater shows the current and latest versions before updating.
• Updates preserve the existing Root CA, certificates, state, and service configuration.
• The bootstrap installer now distinguishes between a fresh install, an incomplete setup, and an already configured installation.
• On a fresh install, the installer asks whether to start the initial setup.
• If the initial setup was skipped or never completed, running the installer again offers the setup again.
• Existing configured installations are updated without automatically re-running the setup.
• Downloaded scripts are validated before installation using SHA-256 and Bash syntax checks.

Improvements

• Added local-https --version, --v, and -V to show the installed version.
• The installed version is now displayed in the local-https banner and status output.
• Improved install/update output to show the installed and available versions.

Compatibility

• Technitium DNS installations created before v15 remain supported.
• Fresh Technitium v15+ Linux installations using the dns-server service user are now supported.
• Custom non-root Technitium systemd service users remain supported.

v1.1.2 supersedes the withdrawn v1.1.1 release.

Fixes #13

Full Changelog: v1.1.0...v1.1.2

v1.1.0

Added configurable certificate domain support.

This release includes the configurable certificate domain feature contributed by @DrNefarius in #11, plus follow-up hardening before release.

Changes

• Added --domain support for install, configure, and renew flows
• Added LOCAL_HTTPS_DOMAIN support for non-interactive installs
• Persisted the selected domain across renewals
• Added Pi-hole webserver.domain auto-detection
• Hardened domain validation
• Made CLI --domain override LOCAL_HTTPS_DOMAIN
• Updated installer SHA-256 validation

Contributions

• Make the certificate domain configurable by @DrNefarius in #11

New Contributors

• @DrNefarius made their first contribution in #11

Full Changelog: v1.0.1...v1.1.0

What's Changed

🐛 Bug Fixes

• Fixed services losing access to certificate files after renewal, users and services manually added to the certs group (e.g. Grafana, Nginx) are now preserved across every certificate rotation.

📝 Documentation

• Added note about certs group membership persistence on renewal.
• Added "Other services" section under Service Support with examples for Grafana, Nginx, and similar services.

Local-HTTPS

Overview

local-https is a utility to automate local HTTPS for self-hosted services.
It generates and manages a local Root Certificate Authority, issues certificates with SAN support, and keeps them renewed automatically.

This release marks the first stable version with a defined workflow and expected behavior.

What it does

• Generates a local Root Certificate Authority (Root CA)
• Issues local HTTPS certificates with SAN support
• Installs the Root CA into the system trust store
• Automatically renews certificates before expiration
• Restarts dependent services when certificates change
• Designed for local development and self-hosted environments

Intended use

• Home labs
• Local development
• Self-hosted services on trusted networks

This tool assumes full control of the local system and should only be used on machines you trust.

Installation

Use the installer script pinned to this release:

curl -fsSL https://raw.githubusercontent.com/luizbizzio/local-https/v1.0.0/install.sh | bash

Notes

• This tool modifies system trust stores and certificate files
• Review the scripts before installing
• Behavior is stable, but internal implementation may evolve

License

See LICENSE file in the repository.