Cheapest wildcard SSL certificate?

This page summarizes the projects mentioned and recommended in the original post on /r/selfhosted

Our great sponsors
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • WorkOS - The modern identity platform for B2B SaaS
  • SaaSHub - Software Alternatives and Reviews
  • acme.sh

    A pure Unix shell script implementing ACME client protocol

  • Let’s encrypt dns challenge wildcard is free. Just use acme.sh https://github.com/acmesh-official/acme.sh and you can have it auto renew for you

  • extdns

    External DNS for docker-compose

  • Maybe you will find useful my small project https://github.com/dntsk/extdns

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
  • website

    Let's Encrypt Website and Documentation (by letsencrypt)

  • server.coop

    This will be a cooperatively owned web hosting system based on a distributed virtual server model. The primary market to begin will be people working in the sci/tech field wanting a quick to setup and cheap system, college students, community groups (hackerspaces, 4-H groups, school groups, ex.), and other people wanting a private server.

  • traefik

    The Cloud Native Application Proxy

  • If you're looking for a docker solution, check out my GitHub repo that uses Traefic. You can have as many sub domains as you want. documentation and features are not complete, but making things use https is pretty self explanatory.

  • lego

    Let's Encrypt/ACME client and library written in Go

  • Not really needed. https://certbot.eff.org/ is the typical way of installing certs. I've used https://go-acme.github.io/lego/ and found it simpler but either ways it's a script you run daily and it renews your cert every 30 days? 90 days? I forget how long the certs generated are good for.

  • ssl_get

    A script that helps distribute/update local SSL certs from a centrally managed remote location via SCP or FTP. This allows reducing exposure to external services by retrieving SSL (wildcard) certificates from a single ACME instance (e.g.) or a pfsense/opnsense box. Useful for local network Split-Brain-DNS Setups or for Demilitarized Zones (DMZ).

  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

    WorkOS logo
  • acme-companion

    Automated ACME SSL certificate generation for nginx-proxy

  • Am using this for a few years now and works nicely https://github.com/nginx-proxy/acme-companion never needed a wildcard cert.

  • docker-traefik

    Docker media and home server stack with Docker Compose, Traefik, Swarm Mode, Google OAuth2/Authelia, and LetsEncrypt

  • I don't have my setup publicly documented, but this repo and its writeup can help get you started: https://github.com/htpcBeginner/docker-traefik

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts