All Projects → MarcStan → lets-encrypt-azure

MarcStan / lets-encrypt-azure

Licence: MIT License
Azure function based Let's Encrypt automation for Azure CDN & app services

Programming Languages

C#
18002 projects
shell
77523 projects

Projects that are alternatives of or similar to lets-encrypt-azure

Appservice Acmebot
Automated ACME issuer for Azure App Service (Web Apps / Functions / Containers)
Stars: ✭ 281 (+368.33%)
Mutual labels:  letsencrypt, azure-functions
AzureWebAppSSLManager
Acquires and manages free SSL certificates for Azure Web App and Azure Functions applications.
Stars: ✭ 70 (+16.67%)
Mutual labels:  letsencrypt, azure-functions
Letsencrypt Siteextension
Azure Web App Site Extension for easy installation and configuration of Let's Encrypt issued SSL certifcates for custom domain names.
Stars: ✭ 727 (+1111.67%)
Mutual labels:  letsencrypt, azure-functions
docker-ssl-reverse-proxy
Easy-to-use auto-SSL reverse proxy as a Docker container based on Caddy and Let’s Encrypt
Stars: ✭ 22 (-63.33%)
Mutual labels:  letsencrypt, lets-encrypt
acme
Go client library implementation for ACME v2 (RFC8555)
Stars: ✭ 77 (+28.33%)
Mutual labels:  letsencrypt, lets-encrypt
traefik-letsencrypt-compose
Basic Traefik configuration which includes automatic Let’s Encrypt certificate management and password protected dashboard
Stars: ✭ 38 (-36.67%)
Mutual labels:  letsencrypt, lets-encrypt
acme-dns-01-cloudflare
Cloudflare DNS for Let's Encrypt / ACME dns-01 challenges with Greenlock.js and ACME.js
Stars: ✭ 13 (-78.33%)
Mutual labels:  letsencrypt, lets-encrypt
docker-haproxy-certbot
Dockerized HAProxy with Let's Encrypt certificates automatic renewal
Stars: ✭ 28 (-53.33%)
Mutual labels:  letsencrypt, lets-encrypt
azure-developer-college
Repository for the Azure Developer College Workshop
Stars: ✭ 16 (-73.33%)
Mutual labels:  azure-functions, azure-app-service
Intranet-Lets-Encrypt-Certification
Guide to setting up a Let's Encrypt SSL certificate for a non-public facing server.
Stars: ✭ 27 (-55%)
Mutual labels:  letsencrypt, lets-encrypt
openconnect-installer
Automatically set up an Openconnect/Anyconnect VPN server(ocserv) with Let's Encrypt with just one command in CentOS 8.
Stars: ✭ 64 (+6.67%)
Mutual labels:  letsencrypt, lets-encrypt
AppService
Blog posts from the App Service team
Stars: ✭ 66 (+10%)
Mutual labels:  azure-functions, azure-app-service
Serverless-File-Validation
Using Azure Serverless products to perform file validation on a per-batch basis
Stars: ✭ 21 (-65%)
Mutual labels:  azure-functions, blob-storage
AzUnzipEverything
A simple Azure Function to Unzip files from a blob storage to another one
Stars: ✭ 24 (-60%)
Mutual labels:  azure-functions, blob-storage
ansible-role-containerized-wordpress
Deploy & run Docker Compose project for WordPress instance with Let's Encrypt HTTPS encryption
Stars: ✭ 15 (-75%)
Mutual labels:  letsencrypt
ACMECert
PHP client library for Let's Encrypt (ACME v2 - RFC 8555)
Stars: ✭ 83 (+38.33%)
Mutual labels:  letsencrypt
freshcerts
ACME certificate protocol (Let's Encrypt) proxy client with a dashboard and monitoring
Stars: ✭ 59 (-1.67%)
Mutual labels:  letsencrypt
ubios-cert
Manage SSL / TLS certificates with acme.sh (Let's Encrypt, ZeroSSL) for Ubiquiti UbiOS firmwares
Stars: ✭ 17 (-71.67%)
Mutual labels:  letsencrypt
itr-acme-client
ITronic ACME Client Library
Stars: ✭ 21 (-65%)
Mutual labels:  letsencrypt
s3www
Serve static files from any S3 compatible object storage services (Let's Encrypt ready)
Stars: ✭ 86 (+43.33%)
Mutual labels:  letsencrypt

Azure function based Let's Encrypt automation

Automatically issue Let's Encrypt SSL certificates for all your custom domain names in Azure.

.github/workflows/azure-functionapp.yml

Motivation

Existing solutions (Let's Encrypt Site Extension, Let's Encrypt Webapp Renewer) work well but are target at Azure App Services only.

This solution also enables Azure CDN based domains to use Let's Encrypt certificates (Azure CDN is needed if you want a custom domain name for your static website hosted via azure blob storage).

If you want to know how to setup an Azure CDN based website backed by Blob Storage, read my blog post.

Details

The function runs on a daily schedule and automatically renews all certificates that are close to expiring (based on a configurable threshold). In such a case the function will issue a new certificate for the app service/CDN and automatically configure it.

Features

  • automated Let's Encrypt certificate renewal for
    • Azure App Service*
    • Azure CDN
  • securely store certificates in keyvaults
  • cheap to run (< 0.10$/month)

*Managed App Service Certificates have been provided for free by Microsoft for a while now and as of March 17th 2021 also support Apex domains. This means an Azure native solution exists that automatically rotates app service certificates. I recommend you use it instead of this function for app services.

Error handling

The function runs every day. In case of an error it will simply retry the next day (Let's encrypt also recommends running the renewal daily). If you would like to be informed of any errors you can set up an azure alert to monitor exceptions in the application insights instance (e.g. exception > 0) and have an email/notification delivered to you.

In the worst case (complete failure of the function for a long time) Let's Encrypt will also send out emails to the domain owners days before the actual expiry.

Setup

See Setup.

Changelog

Changelog is here.

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].