Holdfast
2.5k ↗Password manager server compatible with the clients you already use
Oarlock
Your own certificate authority for internal TLS everywhere
- Logged
- 04 OCT 2025
- Outbound
- 348
- Bearing
- example.com
Oarlock runs a private certificate authority with sane defaults: issue certificates for internal services, automate renewal, and get honest TLS on names that never face the internet.
Worth knowing before you commit:
- Distributing the root to your devices is the one-time chore.
- Short-lived certificates plus automation beat long-lived ones.
- Integrates with the common proxies for automatic issuance.
Internal traffic deserves real certificates too. This makes it painless.