Infisical is an open-source platform for secrets management, certificate/PKI lifecycle, key management, and privileged access management. Features include a dashboard, CLI, SDKs and API, secret syncs and rotation, leak scanning, a Kubernetes operator, and self-hosting via Docker.
Open source. Open possibilities.
Discover quality open-source projects, submit projects anonymously, and claim and edit your own project.
A little curiosity. A world of open source.
THE FIRST COLLECTIONLego is a versatile ACME client and Go library for obtaining, renewing, and managing SSL/TLS certificates from Let's Encrypt and other CAs. It supports CLI usage and programmatic integration, featuring over 200 DNS provider plugins for automated DNS-01 challenges, plus HTTP-01 and TLS-ALPN-01 support.
Caddy is an extensible, multi-platform web server written in Go that provides automatic HTTPS by default and supports HTTP/1.1, HTTP/2, and HTTP/3.
acme.sh is a pure Unix shell ACME protocol client that automates issuing, renewing and installing SSL/TLS certificates from CAs like ZeroSSL and Let's Encrypt, with no Python dependency and support for many DNS APIs and web servers.
Certimate is a free, open-source self-hosted ACME tool that automates the full SSL certificate lifecycle—issuance, deployment, renewal, and monitoring—through a visual workflow, with support for 70+ DNS providers and 160+ deployment destinations.
Portlyn is a self-hosted identity-aware reverse proxy with a built-in WireGuard tunnel, combining routing, TLS, per-route authentication, and observability in a single Go binary for homelabs and small teams.