Topics / #letsencrypt
Letsencrypt projects on GitHub
Free TLS certificates from Let Encrypt and ACME automation clients.
As of , the most-starred Letsencrypt projects on GitHub are traefik (65.3K stars), acme.sh (47.8K stars) and certbot (33.3K stars). GitHub.Locker tracks 17 Letsencrypt repositories with 329.2K stars combined. The fastest-growing on October 16 was traefik, with +23 stars in a day.
Hot right now
Most stars gained in a day · Oct 16
+23traefik
traefik/traefik · ★ 65.3KTraefik is a modern HTTP reverse proxy and load balancer built to make deploying and exposing microservices easy, with automatic configuration based on your infrastructure.
+14openship
oblien/openship · ★ 14.8KOpenship is an open-source, self-hostable deployment platform with built-in CI/CD: point it at a repo and it builds, ships, routes and TLS-terminates your app, driven from a desktop app, web dashboard or CLI.
acme.sh
acmesh-official/acme.sh · ★ 47.8Kacme.sh is a pure Unix shell script client for the ACME protocol that automatically issues, renews, and installs free SSL/TLS certificates from CAs like Let's Encrypt or ZeroSSL.
+9dsh-mobile
saya-ch/dsh-mobile · ★ 485DSH Mobile is an Android app and companion plugin for DeepSeek Harness (DSH) that lets you access your desktop DSH session from your phone over LAN or an optional remote tunnel, keeping the same workspace, messages and tools in sync in real time.
The all-time top
17 projects · by stars
- 65.3K
#1 · traefik/traefiktraefik
Traefik is a modern HTTP reverse proxy and load balancer built to make deploying and exposing microservices easy, with automatic configuration based on your infrastructure.
- 47.8K
#2 · acmesh-official/acme.sh
acme.sh
acme.sh is a pure Unix shell script client for the ACME protocol that automatically issues, renews, and installs free SSL/TLS certificates from CAs like Let's Encrypt or ZeroSSL.
- 33.3K
#3 · certbot/certbotcertbot
Certbot is EFF's command-line tool that automatically fetches a free TLS certificate from Let's Encrypt and deploys it to your web server to enable HTTPS, and it can also work with any other certificate authority that speaks the ACME protocol.
- 4
echo
32.8Klabstack/echo · GoEcho is a high performance, minimalist web framework for Go, used to build web apps, RESTful APIs and microservices.
- 5

nginxconfig.io
28.3Kdigitalocean/nginxconfig.io · JavaScriptA free web-based NGINX configuration generator by DigitalOcean: you pick what your server needs and it produces a tuned config for your use case.
- 6

x-ui
19.1Kvaxilu/x-ui · JavaScriptx-ui is a self-hosted web panel for managing an Xray proxy server: multi-user, multi-protocol inbounds (vmess, vless, trojan, shadowsocks, dokodemo-door, socks, http) administered from a browser.
- 7

caprover
15.2Kcaprover/caprover · TypeScriptCapRover is a self-hosted platform-as-a-service (PaaS) that lets you deploy and manage web apps, APIs, and databases on your own server without manually configuring Docker or nginx.
- 8

openship
14.8Koblien/openship · TypeScriptOpenship is an open-source, self-hostable deployment platform with built-in CI/CD: point it at a repo and it builds, ships, routes and TLS-terminates your app, driven from a desktop app, web dashboard or CLI.
- 9

cert-manager
14.1Kcert-manager/cert-manager · Gocert-manager adds certificates and certificate issuers as resource types in Kubernetes, automating the process of obtaining, renewing, and using TLS certificates for workloads in a cluster.
- 10

haoel.github.io
13.1Khaoel/haoel.github.io · ShellA long-form Chinese guide by Bilibili engineer 左耳朵 (haoel) that walks through everything needed to bypass internet censorship (the GFW) by renting your own VPS and self-hosting a proxy, from choosing a server all the way to configuring clients on every device.
- 11

nginx-ui
11.6K0xJacky/nginx-ui · GoNginx UI is a web-based admin panel for managing an Nginx server: editing site configs, viewing logs, issuing SSL certificates, and monitoring server stats, all through a browser instead of the command line.
- 12

bunkerweb
11.1Kbunkerity/bunkerweb · PythonBunkerWeb is an open-source, next-generation Web Application Firewall (WAF) built as a full-featured web server on top of NGINX. It protects your web applications and APIs 'secure by default' while integrating as a reverse proxy into your existing environment.
- 13
all-in-one
10.6Knextcloud/all-in-one · PHPThe official Nextcloud installation method: one Docker-managed package that deploys and maintains a full self-hosted Nextcloud instance with most features included, controlled from a single web interface.
- 14
sovereign
10.6Ksovereign/sovereign · HTMLSovereign is a set of Ansible playbooks that build and maintain your own private cloud on a server you control, bundling email, calendar/contacts sync, file storage, VPN, an IRC bouncer, webmail, and more.
- 15

azerioid-stack-manager
710azerioid/azerioid-stack-manager · PHPAZERIOID Stack Manager is a self-contained stack manager and web control panel for operators who run sites on a single Linux server. It bootstraps Caddy, a dedicated PHP-FPM pool and a SQLite-backed admin UI, then lets you add web servers, databases, cache, mail, Node.js and rootless Docker on demand.
- 16

dsh-mobile
485saya-ch/dsh-mobile · TypeScriptDSH Mobile is an Android app and companion plugin for DeepSeek Harness (DSH) that lets you access your desktop DSH session from your phone over LAN or an optional remote tunnel, keeping the same workspace, messages and tools in sync in real time.
- 17
3X-UI_KIT
450itsnotkubrick/3X-UI_KIT · ShellA script that turns a clean VPS into a ready VPN server in minutes: it installs the official 3X-UI panel, sets up 11 popular protocols, a certificate and a firewall, and gives you one subscription link. No domain needed.
Related topics
Often tagged together