Self-hosted projects tagged “Certificate Management

30 open source projects with this tag

30 services found

Coolify logo

Coolify

Self-hosted PaaS for deploying apps, databases, and services

61.1k
5.4k
Last commit

Open-source, self-hostable PaaS to deploy websites, full-stack apps, databases, and Docker services on your own servers with Git-based CI/CD workflows.

Apache-2.0Actively maintained
Alternative to:
Heroku logo
Heroku
+12
Nginx Proxy Manager logo

Nginx Proxy Manager

Web UI to manage Nginx reverse proxy hosts and SSL certificates

34k
3.9k
Last commit

Nginx Proxy Manager is a web-based admin panel for managing Nginx reverse proxy hosts, redirects, streams, and Let’s Encrypt SSL certificates via Docker.

MITActively maintained
Alternative to:
NGINX Management Suite logo
NGINX Management Suite
+6
Infisical logo

Infisical

Open-source platform for secrets, PKI certificates, and privileged access

29k
2.2k
Last commit

Infisical is an open-source platform to manage and deliver app secrets, certificates (PKI), SSH credentials, and encryption keys across teams and infrastructure.

Actively maintained
Alternative to:
HashiCorp Vault logo
HashiCorp Vault
+9
docker-mailserver logo

docker-mailserver

Containerized mail server stack for SMTP and IMAP with anti-spam

18.8k
2k
Last commit

Production-ready mail server stack in a Docker container with SMTP, IMAP/POP3, LDAP auth, anti-spam/AV, DKIM/DMARC, and optional OAuth2 support.

MITActively maintained
Alternative to:
Gmail logo
Gmail
+16
CapRover logo

CapRover

Open-source PaaS that automates Docker app deployment and web serving

15.1k
995
Last commit

CapRover is an open-source platform to deploy, manage and scale apps using Docker and nginx with a web UI and CLI, automatic SSL, one-click databases and clustering support.

Actively maintained
Alternative to:
Coolify Cloud logo
Coolify Cloud
+19
OpenVPN logo

OpenVPN

Open-source VPN daemon for TLS-based secure tunneling

14.4k
3.4k
Last commit

OpenVPN is a widely used open-source VPN daemon providing TLS/SSL-based secure tunneling, flexible client-server and site-to-site modes, and cross-platform support.

Actively maintained
Alternative to:
OpenVPN CloudConnexa logo
OpenVPN CloudConnexa
+18
mailcow: dockerized logo

mailcow: dockerized

Docker-based email server suite with a web admin interface

13.3k
1.8k
Last commit

Mailcow is a dockerized mail server suite providing SMTP/IMAP, webmail, anti-spam/anti-virus, and domain/mailbox administration via a unified web UI.

GPL-3.0Actively maintained
Alternative to:
Microsoft Exchange Online logo
Microsoft Exchange Online
+16
Nginx UI logo

Nginx UI

Web UI for managing Nginx configurations, certificates, and logs

11.5k
867
Last commit

Self-hosted web interface to manage Nginx configs, reload safely, issue Let’s Encrypt certificates, view logs, monitor server stats, and manage multiple nodes.

AGPL-3.0Actively maintained
Alternative to:
NGINX Management Suite logo
NGINX Management Suite
+4
step-ca logo

step-ca

Private certificate authority and ACME server for X.509 and SSH

8.8k
580
Last commit

step-ca is a private CA and ACME server for issuing and automating X.509 TLS and SSH certificates, enabling short-lived credentials and secure enrollment for teams.

Apache-2.0Actively maintained
Alternative to:
HashiCorp Vault logo
HashiCorp Vault
+7

OpenBao

Open source secrets management for keys, certificates, and tokens

7.2k
546
Last commit

OpenBao is an open source secrets management platform to securely store, generate, lease, and revoke secrets, certificates, and encryption keys with auditing and access control.

MPL-2.0Actively maintained
Alternative to:
HashiCorp Vault logo
HashiCorp Vault
+3

Maddy Mail Server

Composable all-in-one SMTP/IMAP mail server with security features

6.1k
326
Last commit

Go-based, modular mail server implementing SMTP/LMTP/IMAP with built-in DKIM/SPF/DMARC, storage backends (SQLite/Postgres/S3), Prometheus metrics and Docker support.

GPL-3.0Actively maintained
Alternative to:
Microsoft Exchange Online logo
Microsoft Exchange Online
+10
Zoraxy logo

Zoraxy

HTTP reverse proxy and gateway with web UI and real-time analytics

5.4k
320
Last commit

A general-purpose HTTP reverse proxy and forwarding tool for homelabs, offering web UI, ACME/TLS, stream proxy, plugins and realtime monitoring.

AGPL-3.0Actively maintained
Alternative to:
ngrok logo
ngrok
+16

GoDoxy

Reverse proxy and container orchestrator for self-hosters

4.1k
188
Last commit

High-performance reverse proxy and container orchestrator with Web UI, automatic Docker/Podman route discovery, idle-sleep, access control, and automated Let's Encrypt support.

Actively maintained
Alternative to:
Cloudflare Tunnel logo
Cloudflare Tunnel
+19
SWAG logo

SWAG

Nginx reverse proxy with automated TLS certificates and fail2ban

3.7k
276
Last commit

LinuxServer.io SWAG is a Docker image bundling Nginx reverse proxy, ACME certificate automation (Let’s Encrypt/ZeroSSL), optional PHP, and fail2ban intrusion prevention.

GPL-3.0Actively maintained
Alternative to:
Apache HTTP Server logo
Apache HTTP Server
+9
CheckCle logo

CheckCle

Open-source monitoring platform for uptime and server metrics

2.9k
253
Last commit

Self-hosted monitoring for servers, services, SSL, incidents and status pages; React frontend with a Go backend and embedded SQLite data store.

MITActively maintained
Alternative to:
Datadog Cloud Monitoring logo
Datadog Cloud Monitoring
+16
Canine logo

Canine

A developer-friendly PaaS for deploying apps on Kubernetes

2.9k
120
Last commit

Canine is an open source Kubernetes deployment platform that provides a Heroku-like PaaS experience with Git-driven deploys, web UI management, and built-in SSL and secrets.

Apache-2.0Actively maintained
Alternative to:
Heroku logo
Heroku
+10
emailwiz logo

emailwiz

Bash-based installer that deploys a secure Debian/Ubuntu mail server stack.

2.2k
341
Last commit

A Bash script that auto-implements a full mail server (Postfix, Dovecot, DKIM, SpamAssassin) with TLS and PAM-based logins on Debian/Ubuntu.

GPL-3.0Slowing down
Alternative to:
Microsoft Exchange Online logo
Microsoft Exchange Online
+14
Ferron logo

Ferron

Fast, memory-safe web server with automatic TLS and modern protocol support

2.1k
94
Last commit

A Rust-written, memory-safe web server offering automatic Let's Encrypt TLS, KDL configuration, HTTP/2/HTTP/3, reverse proxying, and built-in tooling for serving web apps.

MITActively maintained
Alternative to:
Apache HTTP Server logo
Apache HTTP Server
+3
CloudPanel logo

CloudPanel

Modern server control panel for managing web hosting stacks

1.9k
139
Last commit

CloudPanel is a lightweight server control panel for managing PHP, Node.js, Python, static sites, and reverse proxies with SSL/TLS and performance-focused defaults.

Actively maintained
Alternative to:
CloudPanel logo
CloudPanel
+12
Self-Hosted Gateway logo

Self-Hosted Gateway

Docker-native reverse proxy over WireGuard to expose local services

1.7k
87
Last commit

Automates Reverse Proxy-over-VPN (RPoVPN) using WireGuard, Caddy and NGINX to expose Docker Compose services to the public Internet with automated TLS.

AGPL-3.0Slowing down
Alternative to:
Cloudflare Tunnel logo
Cloudflare Tunnel
+3
UUSEC WAF logo

UUSEC WAF

Web application firewall and API security gateway (WAAP)

1.7k
170
Last commit

High-performance web application firewall and API security gateway with semantic detection, rule management, and reverse-proxy deployment for protecting websites and APIs.

BSD-2-ClauseActively maintained
Alternative to:
Cloudflare Web Application Firewall (WAF) logo
Cloudflare Web Application Firewall (WAF)
+9
Dovecot logo

Dovecot

Secure IMAP, POP3 and LMTP server and email storage backend

1.2k
347
Last commit

High-performance, standards-compliant IMAP/POP3/LMTP server with flexible authentication, extensible plugin system (Lua, Sieve) and OpenSSL TLS support.

Actively maintained
Alternative to:
Microsoft Exchange Online logo
Microsoft Exchange Online
+15

VaulTLS

Web application to generate and manage mTLS certificates.

876
43
Last commit

Self-hosted web app to generate, manage and distribute mTLS client and server certificates with OIDC auth, email alerts and a REST API.

GPL-3.0Actively maintained
Alternative to:
Venafi TLS Protect logo
Venafi TLS Protect
+5
Deployrr logo

Deployrr

Automated Docker and Docker Compose homelab deployment

801
79
Last commit

Deployrr automates homelab setup and app deployment using Docker and Docker Compose, with pre-configured stacks, Traefik reverse proxy options, and security integrations.

Actively maintained
Alternative to:
Portainer Business Edition (Portainer Cloud) logo
Portainer Business Edition (Portainer Cloud)
+19
Cert Warden logo

Cert Warden

Centralized ACME certificate manager with REST API and UI

602
25
Last commit

Open-source centralized ACME client to manage TLS certificates with automated renewals, API-key retrieval for clients, http-01/dns-01 challenge support, Go backend and React UI.

Actively maintained
Alternative to:
Caddy Cloud logo
Caddy Cloud
+5
Dovel logo

Dovel

Simple Go-based SMTP server for receiving and sending mail

Lightweight SMTP server written in Go that receives and sends email via a single JSON config and executable hooks; supports per-user DKIM and TLS.

Activity unknown
Alternative to:
Amazon Simple Email Service (Amazon SES) logo
Amazon Simple Email Service (Amazon SES)
+11
Easypanel logo

Easypanel

Server control panel for deploying and managing Docker apps

Self-hosted control panel to deploy, manage, and monitor Docker-based apps with domains, SSL, environment variables, and one-click services.

Activity unknown
Alternative to:
Coolify Cloud logo
Coolify Cloud
+15
Nirvati logo

Nirvati

Open-source server management and self-hosting platform

Open-source self-hosting and server management platform built on Kubernetes (k3s/RKE2) with an app store, strong app isolation, storage controls, and built-in HTTPS.

Activity unknown
Alternative to:
Cloudron logo
Cloudron
+15
OpenSMTPD logo

OpenSMTPD

Secure, lightweight SMTP server implementation compliant with RFC 5321

OpenSMTPD is an open-source, minimal SMTP daemon from the OpenBSD project providing an RFC-compliant MTA with privilege separation, table backends, filters and TLS support.

Activity unknown
Alternative to:
Postfix logo
Postfix
+11
OpenSSH SFTP server logo

OpenSSH SFTP server

SFTP server subsystem of the OpenSSH secure-remote-access suite

The sftp-server subsystem in OpenSSH provides SFTP file-transfer services over SSH with support for internal-sftp, chroot jails, public-key and certificate authentication, and protocol extensions.

Activity unknown
Alternative to:
Files.com logo
Files.com
+12