Welcome to Aleff

Aleff provides automated fetching and renewing of Let's Encrypt certificates for services registered in Consul and served via Fabio.

This architecture is common with Nomad and adding SSL is simply a matter of deploying the Aleff job.

By detecting urlprefix- (configurable) tags on services registered with Consul and extracting the domain names, Aleff will request or renew SSL certificates as required. The certificates are then stored in Consul in the format required by Fabio's Consul-based certificate store.

Note that Aleff currently only supports provisioning certificates for publicly-available domains; it does not support requesting certificates for internal services. This may be added as a feature in a future release.

Features

  • Easy deployment using official docker images.
  • Fully automated; deploy and forget.
  • Not tied to Nomad, compatible with any Consul/Fabio setup assuming you can configure the routing appropriately.

Where should I go next?