diff --git a/ct/certmate.sh b/ct/certmate.sh deleted file mode 100644 index 4c5f04c870..0000000000 --- a/ct/certmate.sh +++ /dev/null @@ -1,66 +0,0 @@ -#!/usr/bin/env bash -_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/DevScripts/main" -_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func" -source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func") -# Copyright (c) 2021-2026 community-scripts ORG -# Author: fabriziosalmi -# License: MIT | https://github.com/community-scripts/DevScripts/raw/main/LICENSE -# Source: https://github.com/fabriziosalmi/certmate - -APP="CertMate" -var_tags="${var_tags:-ssl;certificates;acme}" -var_cpu="${var_cpu:-2}" -var_ram="${var_ram:-2048}" -var_disk="${var_disk:-8}" -var_os="${var_os:-debian}" -var_version="${var_version:-13}" -#var_arm64="${var_arm64:-no}" # unset = ask the user; set yes/no only when verified -var_unprivileged="${var_unprivileged:-1}" - -header_info "$APP" -variables -color -catch_errors - -function update_script() { - header_info - check_container_storage - check_container_resources - - if [[ ! -d /opt/certmate ]]; then - msg_error "No ${APP} Installation Found!" - exit - fi - - if check_for_gh_release "certmate" "fabriziosalmi/certmate"; then - msg_info "Stopping CertMate" - systemctl stop certmate - msg_ok "Stopped CertMate" - - PYTHON_VERSION="3.12" setup_uv - CLEAN_INSTALL=1 fetch_and_deploy_gh_release "certmate" "fabriziosalmi/certmate" "tarball" - - msg_info "Installing CertMate Dependencies" - cd /opt/certmate - $STD uv venv --python 3.12 /opt/certmate/.venv - $STD uv pip sync --python /opt/certmate/.venv/bin/python requirements.lock - $STD /opt/certmate/.venv/bin/certbot --version - msg_ok "Installed CertMate Dependencies" - - msg_info "Starting CertMate" - systemctl start certmate - msg_ok "Started CertMate" - msg_ok "Updated successfully!" - fi - exit -} - -start -build_container -description - -msg_ok "Completed Successfully!\n" -echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}" -echo -e "${INFO}${YW}Access it using the following URL:${CL}" -echo -e "${GATEWAY}${BGN}http://${IP}:8000${CL}" -echo -e "${INFO}${YW}The first page creates the admin account and asks for the API token: grep API_BEARER_TOKEN /opt/certmate_data/.env${CL}" diff --git a/install/certmate-install.sh b/install/certmate-install.sh deleted file mode 100644 index cd119f92f8..0000000000 --- a/install/certmate-install.sh +++ /dev/null @@ -1,69 +0,0 @@ -#!/usr/bin/env bash - -# Copyright (c) 2021-2026 community-scripts ORG -# Author: fabriziosalmi -# License: MIT | https://github.com/community-scripts/DevScripts/raw/main/LICENSE -# Source: https://github.com/fabriziosalmi/certmate - -source /dev/stdin <<<"$FUNCTIONS_FILE_PATH" -color -verb_ip6 -catch_errors -setting_up_container -network_check -update_os - -PYTHON_VERSION="3.12" setup_uv -fetch_and_deploy_gh_release "certmate" "fabriziosalmi/certmate" "tarball" - -msg_info "Installing CertMate Dependencies" -cd /opt/certmate -$STD uv venv --python 3.12 /opt/certmate/.venv -# requirements.lock is the fully pinned set the official image is built from -$STD uv pip sync --python /opt/certmate/.venv/bin/python requirements.lock -$STD /opt/certmate/.venv/bin/certbot --version -msg_ok "Installed CertMate Dependencies" - -msg_info "Configuring CertMate" -mkdir -p /opt/certmate_data/{certificates,data,backups,logs} -cat </opt/certmate_data/.env -API_BEARER_TOKEN=$(openssl rand -hex 32) -SECRET_KEY=$(openssl rand -hex 32) -CERTMATE_BACKUP_PASSPHRASE=$(openssl rand -hex 32) -BEHIND_PROXY=false -EOF -chmod 600 /opt/certmate_data/.env -msg_ok "Configured CertMate" - -msg_info "Creating Service" -cat </etc/systemd/system/certmate.service -[Unit] -Description=CertMate SSL Certificate Manager -After=network-online.target -Wants=network-online.target - -[Service] -Type=simple -User=root -WorkingDirectory=/opt/certmate -Environment=PATH=/opt/certmate/.venv/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin -Environment=CERTMATE_CERT_DIR=/opt/certmate_data/certificates -Environment=CERTMATE_DATA_DIR=/opt/certmate_data/data -Environment=CERTMATE_BACKUP_DIR=/opt/certmate_data/backups -Environment=CERTMATE_LOGS_DIR=/opt/certmate_data/logs -Environment=ACME_CHALLENGES_DIR=/opt/certmate_data/data/acme-challenges -EnvironmentFile=/opt/certmate_data/.env -# One worker: the renewal scheduler, sessions and rate limits live in-process -ExecStart=/opt/certmate/.venv/bin/gunicorn --bind 0.0.0.0:8000 --workers 1 --threads 8 --timeout 300 --no-control-socket app:app -Restart=on-failure -RestartSec=5 - -[Install] -WantedBy=multi-user.target -EOF -systemctl enable -q --now certmate -msg_ok "Created Service" - -motd_ssh -customize -cleanup_lxc diff --git a/json/certmate.json b/json/certmate.json deleted file mode 100644 index 90c3e5c8a2..0000000000 --- a/json/certmate.json +++ /dev/null @@ -1,53 +0,0 @@ -{ - "name": "CertMate", - "slug": "certmate", - "categories": [ - 6 - ], - "date_created": "2026-09-30", - "type": "ct", - "updateable": true, - "privileged": false, - "interface_port": 8000, - "documentation": "https://github.com/fabriziosalmi/certmate/blob/main/docs/installation.md", - "website": "https://www.certmate.org", - "repository": "https://github.com/fabriziosalmi/certmate", - "logo": "https://cdn.jsdelivr.net/gh/fabriziosalmi/certmate@main/certmate_logo.png", - "description": "CertMate is a self-hosted SSL/TLS certificate manager. It issues and renews certificates over ACME (Let's Encrypt, ZeroSSL or a private ACME CA) with DNS-01 across many DNS providers or HTTP-01, renews them on a schedule, and exposes a web UI and a REST API for issuing, downloading and deploying certificates, with encrypted backups and webhook notifications.", - "install_methods": [ - { - "type": "default", - "script": "ct/certmate.sh", - "config_path": "/opt/certmate_data/.env", - "resources": { - "cpu": 2, - "ram": 2048, - "hdd": 8, - "os": "Debian", - "version": "13" - } - } - ], - "default_credentials": { - "username": null, - "password": null - }, - "notes": [ - { - "text": "There is no default login. The first page creates the administrator account and asks for the API token, which the install generated: grep API_BEARER_TOKEN /opt/certmate_data/.env", - "type": "warning" - }, - { - "text": "Keep a copy of /opt/certmate_data/.env off the container. CERTMATE_BACKUP_PASSPHRASE encrypts the backups, and SECRET_KEY must match for a backup to restore the API token.", - "type": "warning" - }, - { - "text": "CertMate listens on plain HTTP on port 8000 on every interface. To expose it beyond your LAN, put an HTTPS reverse proxy in front and set BEHIND_PROXY=true in /opt/certmate_data/.env, then run systemctl restart certmate.", - "type": "info" - }, - { - "text": "Certificates, settings, backups and logs live in /opt/certmate_data and survive updates.", - "type": "info" - } - ] -}