Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR. Learn more →
Top 23 Letsencrypt Open-Source Projects
-
Sidecar containers: Google Cloud Run has a cool feature where you can run multiple containers next to each other. So for example, if you want to run Caddy or Traefik as a reverse proxy for your ingress container and then have both your web frontend container & backend api container co-located in the same service, you can do that & have everything be super low latency.
-
CodeRabbit
CodeRabbit: AI Code Reviews for Developers. Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR.
-
Project mention: Bunster: Compile bash scripts to self contained executables | news.ycombinator.com | 2025-01-23
Thank you for using the project!
On the concern of it would be harder to setup, I think it would be easier in fact, you would simply curl the Go or C statically generated binary to your path and would alleviate the need for jq or curl to be installed alongside.
I think the reason I haven’t made the switch yet is I like Bash (even though my script is getting pretty big), and in a way it’s a testament to what’s possible in the language. Projects like https://github.com/acmesh-official/acme.sh really show the power of Bash.
That and I think the project would need a name change, and discord.sh as a name gets the point across better than anything I can think of.
-
letsencrypt
Certbot is EFF's tool to obtain certs from Let's Encrypt and (optionally) auto-enable HTTPS on your server. It can also act as a client for any other CA that uses the ACME protocol.
-
full-stack-fastapi-template
Full stack, modern web application template. Using FastAPI, React, SQLModel, PostgreSQL, Docker, GitHub Actions, automatic HTTPS and more.
Flask Tutorial: https://palletsprojects.com/p/flask/ FastAPI Tutorial: https://github.com/tiangolo/full-stack-fastapi-template Django REST Framework Tutorial: https://www.django-rest-framework.org/tutorial/quickstart/ Nginx Configuration Guide: https://docs.nginx.com/nginx/admin-guide/web-server/web-server/ Confluent Kafka Python Client: https://docs.confluent.io/platform/current/clients/api-docs/confluent-kafka-python.html Remember: This is a high-level overview. Each step involves further research and configuration based on your specific requirements.
-
Project mention: Which Go Web Backend Framework Is Right for Your Next Project? A Detailed Analysis of Features and Performance | dev.to | 2025-03-16
Echo
-
-
Project mention: Technical Guide: Syncing Ingress Resources from various Virtual Cluster on GKE with vCluster | dev.to | 2025-03-03
kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.16.3/cert-manager.yaml
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
-
You could just get a wildcard certificate with lets encrypt, via a dns challenge.
E.g. lego supports many different dns providers
https://go-acme.github.io/lego/
And then internally inside of tailscale you could have your own dns server, which serves subdomains of your domain, and for all subdomains you can use the same wildcard certificate.
This also does not 'expose' your subdomains on Certificate Transparency logs
-
Project mention: Show HN: BunkerWeb – The Open-Source Web Application Firewall (WAF) | news.ycombinator.com | 2024-12-06
-
-
Project mention: A sysadmin's rant about feed readers and crawlers (2022) | news.ycombinator.com | 2025-03-05
> If you pull the feed, don't pull the posts. If you pull the posts, don't pull the feed. If you pull both, you're missing the whole point of having an aggregated feed!
In some cases the reader should fetch both the feed and the pages. Unfortunately, none do
https://github.com/miniflux/v2/issues/3084
-
Project mention: Ask HN: Replacement for Rackspace SMTP Hosting? | news.ycombinator.com | 2025-03-03
Made the switch to self-hosted https://mailu.io (on k8s) 2 years ago when Gandi announced the deprecation of their free plan.
Happy after IP was off most blocklists, but setup was kinda rough - https://mxtoolbox.com is your friend.
-
Project mention: Dehydrated: Letsencrypt/acme client implemented as a shell-script | news.ycombinator.com | 2024-04-19
From this commit:
https://github.com/dehydrated-io/dehydrated/commit/b116e6bc2...
-
-
Project mention: Caddy – The Ultimate Server with Automatic HTTPS | news.ycombinator.com | 2025-02-16
I'm a big fan of pico.sh (it's one of my main inspiration for smallweb.run).
I'm sure you're aware of it, but it might be interesting to others: caddy exposes all of it's internal as library you can easily integrate to your projects: https://github.com/caddyserver/certmagic
-
Project mention: Pangolin: Tunneled Mesh Reverse Proxy Server with Identity and Access Control | news.ycombinator.com | 2025-03-13
-
Project mention: Manage a multiple websites server with Docker, Treafik and auto SSL certificates | dev.to | 2024-05-12
Since 2020, I manage a server to host all my fun side projects on it, but it turns out, it became a server to host multiple Wordpress for a couple of clients. At the beginning, I used Docker coupled with Nginx as reverse proxy. However, I migrated to Treafik as Reverse proxy because:
-
acme-dns
Limited DNS server with RESTful HTTP API to handle ACME DNS challenges easily and securely.
Great question. My first pass at the project was looking to conform to the ACME DNS API [1]. There are some tools for cert management that use that API, so it gave me broad tool support with very little effort. The getlocalcert subdomains don't permit user modification of A, MX, or CNAME records on the public DNS; you've got to do that with a private DNS server you provide.
I may consider extending the service to allow A/AAAA records to private IP ranges, and then I'd need a more full featured API, but this far there hasn't been demand for the feature.
Hit me up on email if you want to chat more (in profile), we're solving some similar problems.
[1] https://github.com/joohoi/acme-dns
-
getssl
obtain free SSL certificates from letsencrypt ACME server Suitable for automating the process on remote servers.
> certbot is a python program, better hope it keeps working
There is also https://github.com/srvrco/getssl which is a bash script. I have lightly audited it years ago and it did not seem to upload your private keys anywhere... If have used it occasionally, but I don't let it run as root, so I need to copy the retrieved certs into the the server config manually.
-
-
lua-resty-auto-ssl
On the fly (and free) SSL registration and renewal inside OpenResty/nginx with Let's Encrypt.
-
-
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
NOTE:
The open source projects on this list are ordered by number of github stars.
The number of mentions indicates repo mentiontions in the last 12 Months or
since we started tracking (Dec 2020).
Letsencrypt discussion
Letsencrypt related posts
-
GoDoxy – Easy to use reverse proxy with Docker integration
-
Sprint 4 - TLS Certificates and CSP
-
Pangolin: Tunneled Mesh Reverse Proxy Server with Identity and Access Control
-
Pangolin: Tunneled mesh reverse proxy server
-
Technical Guide: Syncing Ingress Resources from various Virtual Cluster on GKE with vCluster
-
How to Set Up a Subdomain with Nginx and SSL on DigitalOcean
-
Zero Trust at the Edge (part 3)
-
A note from our sponsor - CodeRabbit
coderabbit.ai | 23 Mar 2025
Index
What are some of the best open-source Letsencrypt projects? This list will help you:
| # | Project | Stars |
|---|---|---|
| 1 | traefik | 53,741 |
| 2 | acme.sh | 41,774 |
| 3 | letsencrypt | 32,020 |
| 4 | full-stack-fastapi-template | 31,218 |
| 5 | Echo | 30,678 |
| 6 | nginxconfig.io | 28,007 |
| 7 | cert-manager | 12,598 |
| 8 | lego | 8,350 |
| 9 | BunkerWeb | 7,700 |
| 10 | acme-companion | 7,517 |
| 11 | Miniflux | 7,361 |
| 12 | Mailu | 6,295 |
| 13 | dehydrated | 6,017 |
| 14 | win-acme | 5,401 |
| 15 | certmagic | 5,177 |
| 16 | pangolin | 4,087 |
| 17 | nginx-proxy-automation | 2,664 |
| 18 | acme-dns | 2,313 |
| 19 | getssl | 2,143 |
| 20 | acmetool | 2,061 |
| 21 | lua-resty-auto-ssl | 1,955 |
| 22 | gobetween | 1,948 |
| 23 | Armor | 1,663 |
Sponsored
CodeRabbit: AI Code Reviews for Developers
Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR.
coderabbit.ai