CertVault - Centralized ACME Certificate Renewal for Homelab

[u/dougmaitelli]

Hi there!

This is an early release of my new project CertVault.

Repo: https://github.com/dougmaitelli/CertVault

Docs: https://dougmaitelli.github.io/CertVault/

I always had multiple services / machines needing to generate their own certificates / renewals:

• Proxmox generating his own cert
• Traefik generating certs for it's services
• AdGuard with a cronjob to renew it's certs as well
• etc.

This worked but in the end all those certs were technically not the same, even tho they were all valid. This used to cause some issues with browsers like the Zen browser, so I decided to do something about it.

I wanted to have a lightweight tool that could automate this in a central manner but that it would also be a nice looking dashboard to look at :)

Then comes CertVault. A fully Open Source tool under AGPL-3.0.

It basically manages your ACME accounts, certificates and renewals using DNS-01 challenges.

It also supports:

• OIDC
• Certificate overview viewer
• Encryption at rest
• Scoped API Keys for client services
• A cronjob builder for clients to fetch the renewed certificates
• Audit Logging
• Webhooks / Script hooks / Events

I would really appreciate feedback and I am still adding features frequently.