Code and demonstration
Problem to solve
ACME issuance and renewal need a repeatable, deployable environment rather than manual certificate commands.
Architecture and approach
An educational automation project built around ACME.sh, OpenSSL and shell scripts, packaged with Docker and a Railway configuration. The repository documents installation, domain validation and renewal routines.
What it provides
Portable ACME.sh runtime and shell scripts Repeatable Docker/Railway packaging for controlled experiments Documentation of DNS validation, renewal and certificate lifecycle concepts
Security considerations
Private keys must stay outside version control with restrictive file permissions. DNS provider tokens must use minimal access and safe secret storage. This repository is described as an educational DevOps/security project, not an audited commercial certificate service.