Self-hosted projects tagged “Certificate Management”

Open-source, self-hostable PaaS to deploy websites, full-stack apps, databases, and Docker services on your own servers with Git-based CI/CD workflows.

Alternative to:

Heroku+12

Nginx Proxy Manager is a web-based admin panel for managing Nginx reverse proxy hosts, redirects, streams, and Let’s Encrypt SSL certificates via Docker.

Alternative to:

NGINX Management Suite+6

Infisical is an open-source platform to manage and deliver app secrets, certificates (PKI), SSH credentials, and encryption keys across teams and infrastructure.

Alternative to:

HashiCorp Vault+9

Production-ready mail server stack in a Docker container with SMTP, IMAP/POP3, LDAP auth, anti-spam/AV, DKIM/DMARC, and optional OAuth2 support.

Alternative to:

Gmail+16

CapRover is an open-source platform to deploy, manage and scale apps using Docker and nginx with a web UI and CLI, automatic SSL, one-click databases and clustering suppo...

Alternative to:

Coolify Cloud+19

OpenVPN is a widely used open-source VPN daemon providing TLS/SSL-based secure tunneling, flexible client-server and site-to-site modes, and cross-platform support.

Alternative to:

OpenVPN CloudConnexa+18

Mailcow is a dockerized mail server suite providing SMTP/IMAP, webmail, anti-spam/anti-virus, and domain/mailbox administration via a unified web UI.

Alternative to:

Microsoft Exchange Online+16

Self-hosted web interface to manage Nginx configs, reload safely, issue Let’s Encrypt certificates, view logs, monitor server stats, and manage multiple nodes.

Alternative to:

NGINX Management Suite+4

step-ca is a private CA and ACME server for issuing and automating X.509 TLS and SSH certificates, enabling short-lived credentials and secure enrollment for teams.

Alternative to:

HashiCorp Vault+7

Go-based, modular mail server implementing SMTP/LMTP/IMAP with built-in DKIM/SPF/DMARC, storage backends (SQLite/Postgres/S3), Prometheus metrics and Docker support.

Alternative to:

Microsoft Exchange Online+10

OpenBao is an open source secrets management platform to securely store, generate, lease, and revoke secrets, certificates, and encryption keys with auditing and access c...

Alternative to:

HashiCorp Vault+3

A general-purpose HTTP reverse proxy and forwarding tool for homelabs, offering web UI, ACME/TLS, stream proxy, plugins and realtime monitoring.

Alternative to:

ngrok+16

LinuxServer.io SWAG is a Docker image bundling Nginx reverse proxy, ACME certificate automation (Let’s Encrypt/ZeroSSL), optional PHP, and fail2ban intrusion prevention.

Alternative to:

Apache HTTP Server+9

High-performance reverse proxy and container orchestrator with Web UI, automatic Docker/Podman route discovery, idle-sleep, access control, and automated Let's Encrypt su...

Alternative to:

Cloudflare Tunnel+19

Canine is an open source Kubernetes deployment platform that provides a Heroku-like PaaS experience with Git-driven deploys, web UI management, and built-in SSL and secre...

Alternative to:

Heroku+10

Self-hosted monitoring for servers, services, SSL, incidents and status pages; React frontend with a Go backend and embedded SQLite data store.

Alternative to:

Datadog Cloud Monitoring+16

A Bash script that auto-implements a full mail server (Postfix, Dovecot, DKIM, SpamAssassin) with TLS and PAM-based logins on Debian/Ubuntu.

Alternative to:

Microsoft Exchange Online+14

A Rust-written, memory-safe web server offering automatic Let's Encrypt TLS, KDL configuration, HTTP/2/HTTP/3, reverse proxying, and built-in tooling for serving web apps...

Alternative to:

Apache HTTP Server+3

CloudPanel is a lightweight server control panel for managing PHP, Node.js, Python, static sites, and reverse proxies with SSL/TLS and performance-focused defaults.

Alternative to:

CloudPanel+12

Automates Reverse Proxy-over-VPN (RPoVPN) using WireGuard, Caddy and NGINX to expose Docker Compose services to the public Internet with automated TLS.

Alternative to:

Cloudflare Tunnel+3

High-performance web application firewall and API security gateway with semantic detection, rule management, and reverse-proxy deployment for protecting websites and APIs...

Alternative to:

Cloudflare Web Application Firewall (WAF)+9

High-performance, standards-compliant IMAP/POP3/LMTP server with flexible authentication, extensible plugin system (Lua, Sieve) and OpenSSL TLS support.

Alternative to:

Microsoft Exchange Online+15

Deployrr automates homelab setup and app deployment using Docker and Docker Compose, with pre-configured stacks, Traefik reverse proxy options, and security integrations.

Alternative to:

Portainer Business Edition (Portainer Cloud)+19

Open-source centralized ACME client to manage TLS certificates with automated renewals, API-key retrieval for clients, http-01/dns-01 challenge support, Go backend and Re...

Alternative to:

Caddy Cloud+5

Self-hosted web app to generate, manage and distribute mTLS client and server certificates with OIDC auth, email alerts and a REST API.

Alternative to:

Venafi TLS Protect+5

The sftp-server subsystem in OpenSSH provides SFTP file-transfer services over SSH with support for internal-sftp, chroot jails, public-key and certificate authentication...

Alternative to:

Files.com+12

Self-hosted control panel to deploy, manage, and monitor Docker-based apps with domains, SSL, environment variables, and one-click services.

Alternative to:

Coolify Cloud+15

OpenSMTPD is an open-source, minimal SMTP daemon from the OpenBSD project providing an RFC-compliant MTA with privilege separation, table backends, filters and TLS suppor...

Alternative to:

Postfix+11

Open-source self-hosting and server management platform built on Kubernetes (k3s/RKE2) with an app store, strong app isolation, storage controls, and built-in HTTPS.

Alternative to:

Cloudron+15

Lightweight SMTP server written in Go that receives and sends email via a single JSON config and executable hooks; supports per-user DKIM and TLS.

Alternative to:

Amazon Simple Email Service (Amazon SES)+11