haricky kudos for the immediate reply! 🙂
Sure, by "ACA has failed to auto renew" I mean this:
Advisor recommendation on Azure portal says:
Managed certificate failed to renew.
We detected the managed certificate used by the Container App has failed to auto renew. Please follow the documentation link to make sure that the DNS settings of your custom domain are correct.
Yes, I created custom domain on ACA as (free) Azure managed certificate. You're right. After the certificate was issued, I redirected CNAME to FD.
Oh, this complicates things because I don't have my own certificate. Before migrating this app to Azure, I used LetsEncrypt with certbot. Got any recommendation? If I choose again LetsEncrypt, I need to store cert in KeyVault, reference ACA with KeyVault, spin up Azure Automation runbook or VM for renewal ... 🙂