lokeshsg/cert-automator repository overview

⁠CertAutomator

The Centralized "Vault" that Solves the Pain of Certificate Renewals.

CertAutomator is a powerful, secure, and user-friendly web application designed to eliminate the manual "pain" of SSL certificate management. It provides a single point of upload for your certificates and automatically distributes them to a wide range of services across your network.

⁠Key Features

⁠Secure by Design

• Encrypted Local Vault: All credentials, configs, and Private Keys (privkey.enc) are AES-encrypted on disk.
• Hardened Sessions: Built-in CSRF protection, HttpOnly cookies, and strict session management.
• Emergency Access: Every deployment generates a unique one-time Emergency Reset Token in the logs.

⁠Intelligent Automation

• Zero-Touch Startup: Automatically verifies the health of all local and remote certificates immediately upon launch.
• Nightly Health Checks: Runs a global verification engine every night at 12:30 AM to catch expiring certificates before they cause outages.
• UTC-Aware Accuracy: Precision expiration tracking synced to global UTC time.

⁠Broad Integration Support

CertAutomator speaks the language of your favorite local and enterprise services:

• API Drivers: Proxmox, TrueNAS (SCALE/CORE), OPNsense, Portainer.
• SSH/SCP Tunneling: Syncthing, Wazuh, Heimdall, Generic Linux.
• Advanced Conversion: Aruba ClearPass (PEM to PFX auto-conversion).
• Extensible: Generic Webhooks and custom handler support.

⁠Quick Start

⁠1. Create a docker-compose.yml

version: '3.8'

services:
  cert-automator:
    image: lokeshsg/cert-automator:latest
    container_name: cert-automator
    restart: unless-stopped
    ports:
      - "5050:5050"
    volumes:
      - ./config.yaml:/app/config.yaml
      - ./auth.json:/app/auth.json
      - ./certs:/certs
      - ./backup:/backup
      - ./logs:/app/logs
    environment:
      - FLASK_SECRET=GenerateASecretStringHere

⁠2. Initialize & Launch

# Create persistent storage files
touch config.yaml auth.json
mkdir -p certs backup logs

# Fire it up
docker compose up -d

⁠3. Setup

Visit http://[server-ip]:5050 to set your administrator credentials and initialize your encrypted vault!

⁠How it Works

1. Upload: You upload a certificate pack (Cert + Key + optional Chain) once.
2. Assign: You map that certificate to your services (e.g., "Proxmox Cluster").
3. Automate: CertAutomator handles the transmission, format conversion, and service restarts for you.
4. Monitor: The dashboard shows you two statuses: Local Pack (is the file ready?) and Deployed (is the service actually using it?).

⁠Community & Support

CertAutomator is built for the community. If you encounter issues or want to suggest a new handler, please check the logs or reach out on GitHub⁠!

Built with ❤️ for privacy and automation.