ACME server implementation for issuing SSL/TLS certificates
ACME server implementation for issuing SSL/TLS certificates
- server: knrdl/acme-ca-server:latest
- db: Postgres database
curl -q -LSsf "https://raw.githubusercontent.com/composemgr/acme/main/docker-compose.yaml" -o compose.ymlgit clone "https://github.com/composemgr/acme" ~/.local/srv/docker/acme
cd ~/.local/srv/docker/acme
docker compose up -dcomposemgr install acmeTZ=America/New_York
DB_ADMIN_PASS=changeme_admin_password
ENCRYPTION_KEY=changeme_ca_encryption_key
EMAIL_SERVER_HOST=172.17.0.1
EMAIL_SERVER_PORT=587
EMAIL_SERVER_MAIL_FROM=no-reply@${BASE_DOMAIN_NAME:-${BASE_HOST_NAME
APP_ORG_NAME=ACME CA ServerSee docker-compose.yaml for complete list of configurable options.
- Web Interface: http://172.17.0.1:59082
./rootfs/data/db/postgres/acme- Data storage
- Change all default passwords before deploying to production
- Use strong secrets for all authentication tokens
- Configure HTTPS using a reverse proxy (nginx, traefik, caddy)
- Regularly update Docker images for security patches
- Backup your data regularly
docker compose logs -f server# Start services
docker compose up -d
# Stop services
docker compose down
# Update to latest images
docker compose pull && docker compose up -d
# View logs
docker compose logs -f
# Restart services
docker compose restart- Docker Engine 20.10+
- Docker Compose V2+