i run a local step-ca which emits certs for all my local devices. btw in about year and a half, TLS on any browser will require a 45 days max duration. This can't be waived off on MacOS compared to linux/windows browsers. https://www.ssl.com/article/preparing-for-47-day-ssl-tls-certificates/ I already added my domain root CA on all my LAN devices and containers. I also run a Beszel agent on turingpi bmc without any problem already so i'm not to worried about a cronjob that runs every 30 days.