SaaSHub helps you find the best software and product alternatives Learn more →
Top 23 Go Letsencrypt Projects
-
With some more work, you could configure proxies that work lower on the infrastructure level, like NGINX, Envoy Proxy, HAProxy, or Traefik Proxy to give you the classic API gateway functionality. There's also KrakenD as another open-source option.
-
InfluxDB
InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
-
⭐ Echo on GitHub (30k+ stars)
-
After a year of running in production, I'm ready to publish the first public release of the cert-manager issuer for the Essendi XC certificate management tool.
-
You could just get a wildcard certificate with lets encrypt, via a dns challenge.
E.g. lego supports many different dns providers
https://go-acme.github.io/lego/
And then internally inside of tailscale you could have your own dns server, which serves subdomains of your domain, and for all subdomains you can use the same wildcard certificate.
This also does not 'expose' your subdomains on Certificate Transparency logs
-
My problem with RSS is that I tend to subscribe to too many things and then it's too much. Also I wanted a solution that was free or self hosted, but I realized it's much better if someone manages the complexity for me, so I just ended up going with the paid hosting for miniflux (https://miniflux.app/).
Now I've just subscribed to a few things I care about, I open the website from time to time, quickly mark as "read" stuff I'm not interested in, and when I have more time I just go through everything that is still unread, because it's been "filtered in". Seems to work!
-
Project mention: Caddy – The Ultimate Server with Automatic HTTPS | news.ycombinator.com | 2025-02-16
I'm a big fan of pico.sh (it's one of my main inspiration for smallweb.run).
I'm sure you're aware of it, but it might be interesting to others: caddy exposes all of it's internal as library you can easily integrate to your projects: https://github.com/caddyserver/certmagic
-
acme-dns
Limited DNS server with RESTful HTTP API to handle ACME DNS challenges easily and securely.
Great question. My first pass at the project was looking to conform to the ACME DNS API [1]. There are some tools for cert management that use that API, so it gave me broad tool support with very little effort. The getlocalcert subdomains don't permit user modification of A, MX, or CNAME records on the public DNS; you've got to do that with a private DNS server you provide.
I may consider extending the service to allow A/AAAA records to private IP ranges, and then I'd need a more full featured API, but this far there hasn't been demand for the feature.
Hit me up on email if you want to chat more (in profile), we're solving some similar problems.
[1] https://github.com/joohoi/acme-dns
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
-
-
Project mention: GoDoxy – Easy to use reverse proxy with Docker integration | news.ycombinator.com | 2025-03-23
-
-
ssl-proxy
:lock: Simple zero-config SSL reverse proxy with real autogenerated certificates (LetsEncrypt, self-signed, provided)
-
labca
A private Certificate Authority for internal (lab) use, based on the open source ACME Automated Certificate Management Environment implementation from Let's Encrypt (tm).
-
-
-
letsdebug
Diagnostic tool/website to help figure out why you can't issue a certificate for Let's Encrypt
-
-
-
-
inca
INternal CA is an API around Certificate Authority flows to handle internal and global certificates at ease
Project mention: INternal CA is an API around Certificate Authority flows | news.ycombinator.com | 2024-06-25 -
certificator
A tool that requests certificates from ACME supporting CA, solves DNS challenges, and stores retrieved certificates in Vault.
-
eclaire
lightning-fast static site webserver with automatic HTTPS right out of the box! (by donuts-are-good)
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Go Letsencrypt discussion
Go Letsencrypt related posts
-
When cert-manager meets Essendi XC
-
Let's Debug
-
GoDoxy – Easy to use reverse proxy with Docker integration
-
Technical Guide: Syncing Ingress Resources from various Virtual Cluster on GKE with vCluster
-
Kubernetes Ingress Controllers: Routing Traffic Made Simple
-
Implémenter le Retrieval Augmented Generation (RAG) de manière privée sur Kubernetes avec KubeAI et…
-
Elastic Cloud on Kubernetes (ECK) with custom domain name
-
A note from our sponsor - SaaSHub
www.saashub.com | 16 May 2025
Index
What are some of the best open-source Letsencrypt projects in Go? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | traefik | 54,588 |
| 2 | Echo | 30,971 |
| 3 | cert-manager | 12,797 |
| 4 | lego | 8,567 |
| 5 | Miniflux | 7,590 |
| 6 | certmagic | 5,221 |
| 7 | acme-dns | 2,370 |
| 8 | acmetool | 2,061 |
| 9 | gobetween | 1,955 |
| 10 | godoxy | 1,796 |
| 11 | Armor | 1,663 |
| 12 | ssl-proxy | 750 |
| 13 | labca | 431 |
| 14 | autotls | 395 |
| 15 | s3www | 169 |
| 16 | letsdebug | 142 |
| 17 | certmaster | 84 |
| 18 | roxy | 49 |
| 19 | syno-cli | 42 |
| 20 | inca | 34 |
| 21 | certificator | 17 |
| 22 | eclaire | 13 |
| 23 | https-forward | 12 |
Sponsored
InfluxDB – Built for High-Performance Time Series Workloads
InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
www.influxdata.com