orly-certs

Overview ¶

orly-certs is a certificate management service that obtains and renews wildcard SSL certificates from Let's Encrypt using DNS-01 challenges.

It supports multiple DNS providers via the lego library and stores certificates at a conventional file path for web apps to consume.

Configuration is via environment variables:

• ORLY_CERTS_DOMAIN: Wildcard domain (e.g., "*.myapp.com")
• ORLY_CERTS_EMAIL: Email for Let's Encrypt account
• ORLY_CERTS_DNS_PROVIDER: DNS provider name (cloudflare, route53, etc.)
• ORLY_CERTS_OUTPUT_DIR: Certificate output directory (default: /var/cache/orly-certs)

Provider-specific credentials are set via standard lego environment variables. See https://go-acme.github.io/lego/dns/ for documentation.