VaulTLS

VaulTLS

Self-hosted mTLS certificate management

Description

Setting up mTLS in a homelab usually means juggling OpenSSL commands, with nobody reminding you when a certificate is about to expire. VaulTLS is a self-hosted web app to issue, manage and distribute TLS and SSH certificates from one interface, with email alerts before expiry.

Built with Rust and Vue and deployed as a container, it supports OpenID Connect login, a REST API and ACME, so Traefik, acme.sh and other clients can renew automatically.

Features



Certificate management:Issue and manage X.509 and SSH certificates in one place.

Expiry alerts:Email notifications before certificates expire.

ACME and API:Works with ACME clients and offers a REST API.

OIDC login:Single sign-on through OpenID Connect.