TLS certificate renewal responsibility for self-hosted Ghost
Self-hosted Ghost does not manage DNS records or TLS certificates. Domain resolution must complete via A, AAAA or CNAME records before requests reach the host, and certificate validation is handled outside core, typically by a reverse proxy in front of the Node.js process. The operator must decide how certificate renewal is performed and how the proxy is rel