acme - :lock: acmetool, an automatic certificate acquisition tool for ACME (Let's Encrypt)

•    Go

---

acmetool is an easy-to-use command line tool for automatically acquiring certificates from ACME servers (such as Let's Encrypt). Designed to flexibly integrate into your webserver setup to enable automatic verification. Unlike the official Let's Encrypt client, this doesn't modify your web server configuration.You can perform verifications using port 80 or 443 (if you don't yet have a server running on one of them); via webroot; by configuring your webserver to proxy requests for /.well-known/acme-challenge/ to a special port (402) which acmetool can listen on; or by configuring your webserver not to listen on port 80, and instead running acmetool's built in HTTPS redirector (and challenge responder) on port 80. This is useful if all you want to do with port 80 is redirect people to port 443.

acmetool certificate acme-server acme letsencrypt ssl tls x509 security

armor - Uncomplicated, modern HTTP server

•    Go

---

Most of the functionality is implemented via Plugin interface which makes writing a custom plugin super easy.

armor http server http2 letsencrypt load-balancer https http-proxy

echo - High performance, minimalist Go web framework

•    Go

---

High performance, minimalist Go web framework

echo web middleware microservice websocket ssl letsencrypt micro-framework https http2 web-framework labstack-echo

docker-letsencrypt-nginx-proxy-companion - LetsEncrypt companion container for nginx-proxy

•    Shell

---

letsencrypt-nginx-proxy-companion is a lightweight companion container for the nginx-proxy. It allows the creation/renewal of Let's Encrypt certificates automatically. See Let's Encrypt section for configuration details.NOTE: The first time this container is launched it generates a new Diffie-Hellman group file. This process can take several minutes to complete (be patient).

nginx-proxy letsencrypt docker reverse-proxy

dehydrated - letsencrypt/acme client implemented as a shell-script – just add water

•    Shell

---

It uses the openssl utility for everything related to actually handling keys and certificates, so you need to have that installed. Please keep in mind that this software and even the acme-protocol are relatively young and may still have some unresolved issues. Feel free to report any issues you find with this script or contribute by submitting a pull request.

certificate signing letsencrypt acme bash

nginx-proxy - Automated nginx proxy for Docker containers using docker-gen

•    Python

---

nginx-proxy sets up a container running nginx and docker-gen. docker-gen generates reverse proxy configs for nginx and reloads nginx when containers are started and stopped.See Automated Nginx Reverse Proxy for Docker for why you might want to use this.

nginx docker docker-gen letsencrypt monitoring docker-monitoring

docker-mailserver - A fullstack but simple mailserver (smtp, imap, antispam, antivirus, ssl

•    Shell

---

A fullstack but simple mail server (smtp, imap, antispam, antivirus...). Only configuration files, no SQL database. Keep it simple and versioned. Easy to deploy and upgrade. Before you open an issue, please have a look this README, the Wiki and Postfix/Dovecot documentation.

docker mailserver mail postfix dovecot spamassassin amavis opendkim opendmarc ldap fail2ban ssl letsencrypt postgrey imap smtp

mailserver - :whale: Simple and full-featured mail server using Docker

•    Shell

---

If this command returns any results please remove or stop the application running on that port. I recommend you to use hardware/nsd-dnssec as an authoritative name server with DNSSEC capabilities. NSD is an authoritative only, high performance, simple and open source name server.

docker mailserver postfix dovecot clamav sieve fetchmail dkim dmarc debian letsencrypt rspamd arc unbound gpg

lua-resty-auto-ssl - On the fly (and free) SSL registration and renewal inside OpenResty/nginx with Let's Encrypt

•    Perl

---

On the fly (and free) SSL registration and renewal inside OpenResty/nginx with Let's Encrypt. This uses the ssl_certificate_by_lua functionality in OpenResty 1.9.7.2+.

letsencrypt openresty nginx ssl ssl-certificate

auto-sni - 🔐 Free, automated HTTPS for NodeJS made easy.

•    Javascript

---

If you have any questions, throw them up on gitter. AutoSNI requires access to low level ports 80 (http) and 443 (https) to operate by default. These ports are typically restricted by the operating system.

auto auto-sni http https lets-encrypt letsencrypt letsencrypt-auto renew secure sni ssl tls web

acme.sh - A pure Unix shell script implementing ACME client protocol

•    Shell

---

It's probably the easiest & smartest shell script to automatically issue & renew the free certificates from Let's Encrypt.

acme acme-protocol letsencrypt certbot shell ash bash posix posix-sh

docker-compose-letsencrypt-nginx-proxy-companion - Automated docker nginx proxy integrated with letsencrypt

•    Shell

---

With this repo you will be able to set up your server with multiple sites using a single NGINX proxy to manage your connections, automating your apps container (port 80 and 443) to auto renew your ssl certificates with Let´s Encrypt. Update this file with your preferences.

nginx-proxy certificate letsencrypt docker docker-compose nginx letsencrypt-certificates

certbot - Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server

•    Python

---

Certbot is part of EFF’s effort to encrypt the entire Internet. Secure communication over the Web relies on HTTPS, which requires the use of a digital certificate that lets browsers verify the identity of web servers (e.g., is that really google.com?). Web servers obtain their certificates from trusted third parties called certificate authorities (CAs). Certbot is an easy-to-use client that fetches a certificate from Let’s Encrypt—an open certificate authority launched by the EFF, Mozilla, and others—and deploys it to a web server. Anyone who has gone through the trouble of setting up a secure website knows what a hassle getting and maintaining a certificate is. Certbot and Let’s Encrypt can automate away the pain and let you turn on and manage HTTPS with simple commands. Using Certbot and Let's Encrypt is free, so there’s no need to arrange payment.

acme acme-client certbot certificate letsencrypt

gobetween - :cloud: Modern & minimalistic load balancer for the Сloud era

•    Go

---

gobetween - modern & minimalistic load balancer and reverse-proxy for the ☁️ Cloud era. Current status: Under active development. Currently in use in several highy loaded production environments.

balancer proxy-server load-balancer discovery microservices docker consul srv cloud tcp tls udp tcp-proxy udp-proxy tls-proxy sni proxy backend lxd letsencrypt

certmagic - Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal

•    Go

---

CertMagic is the most mature, robust, and capable ACME client integration for Go. With CertMagic, you can add one line to your Go application to serve securely over TLS, without ever having to touch certificates.

https acme letsencrypt automatic-https tls tls-certificate

cert-manager - Automatically provision and manage TLS certificates in Kubernetes

•    Go

---

cert-manager is a Kubernetes add-on to automate the management and issuance of TLS certificates from various issuing sources. It will ensure certificates are valid and up to date periodically, and attempt to renew certificates at an appropriate time before expiry.

kubernetes letsencrypt tls certificate crd

kube-lego - Automatically request certificates for Kubernetes Ingress resources from Let's Encrypt

•    Go

---

kube-lego is in maintenance mode only. There is no plan to support any new features. The latest Kubernetes release that kube-lego officially supports is 1.8. The officially endorsed successor is cert-manager. If you are a current user of kube-lego, you can find a migration guide here.

kubernetes letsencrypt ingress

miniflux - Minimalist feed reader written in Go and Postgresql

•    Go

---

It's simple, fast, lightweight and super easy to install.

feed rss atom jsonfeed rdf opml postgresql letsencrypt

Mailu - Insular email distribution - mail server as Docker images

•    Python

---

Mailu is a simple yet full-featured mail server as a set of Docker images. It is free software (both as in free beer and as in free speech), open to suggestions and external contributions. The project aims at providing people with an easily setup, easily maintained and full-featured mail server while not shipping proprietary software nor unrelated features often found in popular groupware. Most of the documentation is available on our Website, you can also try our demo server before setting up your own, and come talk to us on Matrix.

docker email imap pop3 webmail mailserver mail smtp docker-compose dkim dmarc fetchmail letsencrypt

nginxconfig.io - ⚙️ NGiИX config generator on steroids 💉

•    HTML

---

NGINX is so much more than just a webserver. You already knew that, probably. A lot of features with corresponding configuration directives. You can deep dive into the NGINX documentation right now OR you can use this tool to check how NGINX works, observe how your inputs are affecting the output, generate the best config for your specific use-case (and in parallel you can still use the docs).

nginx nginx-configuration php-fpm ssl letsencrypt cdn wordpress https http2 gzip expiration security rate-limiting laravel symfony ssl-certificate security-headers hsts nginx-configs drupal config configuration generator