{"id":19201679,"url":"https://github.com/oott123/certdeploy","last_synced_at":"2026-02-11T09:01:56.014Z","repository":{"id":57659774,"uuid":"426993323","full_name":"oott123/certdeploy","owner":"oott123","description":"All-in-one BYOC solution for CDN services, bring your own certificates onto cloud!","archived":false,"fork":false,"pushed_at":"2025-02-21T09:48:54.000Z","size":93,"stargazers_count":2,"open_issues_count":0,"forks_count":0,"subscribers_count":2,"default_branch":"master","last_synced_at":"2025-04-22T04:59:31.012Z","etag":null,"topics":["aliyun","azure","azure-keyvault","certificate","certificates","ssl","tencentcloud","upyun"],"latest_commit_sha":null,"homepage":"","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"bsd-3-clause","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/oott123.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2021-11-11T12:29:24.000Z","updated_at":"2025-02-21T09:48:48.000Z","dependencies_parsed_at":"2023-12-05T11:29:22.539Z","dependency_job_id":"d179fde1-13fd-49a4-a114-7aab71314019","html_url":"https://github.com/oott123/certdeploy","commit_stats":null,"previous_names":[],"tags_count":11,"template":false,"template_full_name":null,"purl":"pkg:github/oott123/certdeploy","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/oott123%2Fcertdeploy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/oott123%2Fcertdeploy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/oott123%2Fcertdeploy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/oott123%2Fcertdeploy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/oott123","download_url":"https://codeload.github.com/oott123/certdeploy/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/oott123%2Fcertdeploy/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29330858,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-11T06:13:03.264Z","status":"ssl_error","status_checked_at":"2026-02-11T06:12:55.843Z","response_time":97,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aliyun","azure","azure-keyvault","certificate","certificates","ssl","tencentcloud","upyun"],"created_at":"2024-11-09T12:39:48.314Z","updated_at":"2026-02-11T09:01:56.001Z","avatar_url":"https://github.com/oott123.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# certdeploy\n\nAll-in-one BYOC (Bring Your Own Certificates) solution for CDN services, help you to deploy \nSSL (HTTPS) certificates automatically to CDN services.\n\n## Supported deployers\n\n### CDN Providers\n\n* Aliyun (CDN)\n* Upyun (CDN)\n* Tencent Cloud (CDN)\n* UDomain (CDN)\n* Volc Engine (CDN and DCDN)\n\nDeploys to all CDN domains which matched by given certificate.\n\n### Azure KeyVault\n\nUpdates all certificates in specified KeyVault, if and only if all domains in existing \ncertificate are covered by given certificate.\n\n## Environment Variables\n\n* `CERT_PATH` - Certificate file path, should contain certificate and all intermediate certificates. `LEGO_CERT_PATH` is also supported.\n* `CERT_KEY_PATH` - Certificate key file path, should contain private key for certificate. `LEGO_CERT_KEY_PATH` is also supported.\n* `CERT_DEPLOYER` - Deployer vendor. Default: `aliyun`\n\n### Aliyun deployer\n\n* `CERT_DEPLOYER` - `aliyun`\n* `ALIYUN_ACCESS_KEY_ID` - Access key ID for aliyun CDN. User should have `AliyunCDNFullAccess` permission.\n* `ALIYUN_ACCESS_KEY_SECRET` - Access key secret for aliyun CDN.\n* `ALIYUN_CERT_UPDATE_ONLY` - If `true`, only certs for CDN domains with SSL enabled will be updated. Default: `false`\n* `ALIYUN_CERT_RESOURCE_GROUP` - If given, only certs for domains under this resource group will be updated. Default: `(empty)`\n\n### Upyun deployer\n\n* `CERT_DEPLOYER` - `upyun`\n* `UPYUN_USERNAME` - Upyun login username\n* `UPYUN_PASSWORD` - Upyun login password. 2FA is not supported now.\n\n### Tencent Cloud deployer\n\n* `CERT_DEPLOYER` - `tencentcloud`\n* `TENCENTCLOUD_SECRET_ID` - Secret ID for tencent cloud.\n* `TENCENTCLOUD_SECRET_KEY` - Secret Key for tencent cloud.\n* `TENCENTCLOUD_CERT_UPDATE_ONLY` - If `true`, only certs for CDN domains with SSL enabled will be updated. Default: `false`\n\n### UDomain deployer\n\n* `CERT_DEPLOYER` - `udomain`\n* `UDOMAIN_API_KEY` - API Key created from [udomain CDN dashboard](https://cdn.8338.hk/key)\n\n### Volc Engine deployer\n\n\u003cdetails\u003e\n\u003csummary\u003eRequired ACL policy\u003c/summary\u003e\n\n```json\n{\n  \"Statement\": [{\n      \"Effect\": \"Allow\",\n      \"Action\": [\n        \"dcdn:ListCertBind\",\n        \"dcdn:CreateCertBind\",\n        \"CDN:AddCdnCertificate\",\n        \"CDN:DescribeCertConfig\",\n        \"CDN:BatchDeployCert\"\n      ],\n      \"Resource\": [\"*\"]\n  }]\n}\n```\n\n\u003c/details\u003e\n\n* `CERT_DEPLOYER` - `volc`\n* `VOLC_ACCESS_KEY_ID` - Access Key ID.\n* `VOLC_SECRET_ACCESS_KEY` - Secret Access Key.\n* `VOLC_DEPLOY_TARGETS` - `cdn`, `dcdn`, `cdn,dcdn` (default)\n\n### Azure KeyVault deployer\n\n* `CERT_DEPLOYER` - `azure`\n* `AZURE_KEY_VAULT_URI` - Azure KeyVault Uri, likely `https://SOMETHING.vault.azure.net/`\n* Follow [Azure authentication with the Azure SDK for Go](https://learn.microsoft.com/en-us/azure/developer/go/azure-sdk-authentication) \n  and [Assign a Key Vault access policy](https://learn.microsoft.com/en-us/azure/key-vault/general/assign-access-policy)\n  to configure credentials\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Foott123%2Fcertdeploy","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Foott123%2Fcertdeploy","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Foott123%2Fcertdeploy/lists"}