Let's Encrypt ?

[pc86]

Hello
We are testing your very useful app, and we did not find a way to handle Let's Encrypt certificate using SSL Certificate Management. Do you plan something on that ?
Actually, we are using acme.sh scripts (which are working fine), but I did not find a way to trigger the shell from the agent.
Best regards
PhilippeC.

[taylanbakircioglu]

Hi @pc86 — built-in ACME / Let's Encrypt support landed in v1.4.0 (commit 07942a8) — you no longer have to shell out to acme.sh from the agent. Latest stable is v1.5.2 with the Diagnostic Panel and Site Wizard built on top. Thank you for the kind words and the precise use-case description!

What landed

The agent now speaks ACME directly — no acme.sh wrapping needed:

• ACME / SSL Automation page under SSL Certificate Management — pick a provider (Let's Encrypt prod / staging or any RFC-8555 compatible CA), bind it to a cluster, and issue / renew certificates from the UI
• HTTP-01 challenge handling — the backend auto-injects the /.well-known/acme-challenge/ ACL into the affected HAProxy frontends at apply time and removes it once the order reaches valid
• Account binding — one ACME account per provider + cluster, account key managed by the backend, no manual key file handling
• Automatic renewal — orders inside the renewal window are picked up by a 60-second background task; renewal triggers an automatic re-apply to the same cluster
• Multi-domain orders — a single order can carry multiple SANs across the same backend pool
• Per-cluster isolation — orders are scoped to the cluster you select; nothing is shared across clusters by accident

In v1.5.0 (Issue #13) the ACME Diagnostic Panel was added so you can run a full preflight before issuing — DNS / port 80 / agent reachability / ACL preview / account binding — and root-cause failures with a single correlation ID instead of digging through logs.

Install (recommended — latest stable)

docker pull taylanbakircioglu/haproxy-openmanager-backend:1.5.2
docker pull taylanbakircioglu/haproxy-openmanager-frontend:1.5.2

Full installation guide and K8s manifest bundle: https://github.com/taylanbakircioglu/haproxy-openmanager/releases/tag/v1.5.2

Release timeline

• v1.4.0 — initial ACME / Let's Encrypt support shipped (RFC-8555, HTTP-01, automatic renewal, multi-domain orders)
• v1.5.0 — ACME Diagnostic Panel + Site Wizard with one-click ACME enable
• v1.5.1 — wizard-ACME integration hardening (multi-domain orders, account binding)
• v1.5.2 (current) — multi-tenant RBAC, IDN/Punycode normalization, error envelope improvements

Marking this as answered — happy to follow up if you hit any edge case migrating off of acme.sh.