SSL证书自动化管理指南 - Cert-Manager、Let's Encrypt与AWS ACM最佳实践

ssl-certificate-management by aj-geddes/useful-ai-prompts

167 周安装量

160 GitHub Stars

GitHub

安装命令

npx skills add https://github.com/aj-geddes/useful-ai-prompts --skill ssl-certificate-management

自动化开发运维安全

🇨🇳中文介绍

SSL 证书管理

概述

在基础设施中实现自动化的 SSL/TLS 证书管理，包括证书的申请、续期、监控以及向服务的安全分发。

使用场景

启用 HTTPS/TLS
证书续期自动化
多域名证书管理
通配符证书处理
证书监控与告警
零停机证书轮换
内部 PKI 管理

快速开始

最小化工作示例：

# cert-manager-setup.yaml
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: letsencrypt-prod
spec:
  acme:
    server: https://acme-v02.api.letsencrypt.org/directory
    email: admin@myapp.com
    privateKeySecretRef:
      name: letsencrypt-prod
    solvers:
      # HTTP-01 solver for standard domains
      - http01:
          ingress:
            class: nginx
        selector:
          dnsNames:
            - "myapp.com"
            - "www.myapp.com"

      # DNS-01 solver for wildcard domains
      - dns01:
          route53:
            region: us-east-1
// ... (see reference guides for full implementation)

参考指南

广告位招租

在这里展示您的产品或服务

触达数万 AI 开发者，精准高效

联系我们

指南	内容
使用 Cert-Manager 配置 Let's Encrypt	使用 Cert-Manager 配置 Let's Encrypt
AWS ACM 证书管理	AWS ACM 证书管理
证书监控与续期	证书监控与续期
自动化证书续期	自动化证书续期
证书固定	证书固定

🇺🇸English

SSL Certificate Management

Overview
When to Use
Quick Start
Reference Guides
Best Practices

Overview

Implement automated SSL/TLS certificate management across infrastructure, including provisioning, renewal, monitoring, and secure distribution to services.

When to Use

HTTPS/TLS enablement
Certificate renewal automation
Multi-domain certificate management
Wildcard certificate handling
Certificate monitoring and alerts
Zero-downtime certificate rotation
Internal PKI management

Quick Start

Minimal working example:

# cert-manager-setup.yaml
apiVersion: cert-manager.io/v1
kind: ClusterIssuer
metadata:
  name: letsencrypt-prod
spec:
  acme:
    server: https://acme-v02.api.letsencrypt.org/directory
    email: admin@myapp.com
    privateKeySecretRef:
      name: letsencrypt-prod
    solvers:
      # HTTP-01 solver for standard domains
      - http01:
          ingress:
            class: nginx
        selector:
          dnsNames:
            - "myapp.com"
            - "www.myapp.com"

      # DNS-01 solver for wildcard domains
      - dns01:
          route53:
            region: us-east-1
// ... (see reference guides for full implementation)

Reference Guides

Detailed implementations in the references/ directory:

Guide	Contents
Let's Encrypt with Cert-Manager	Let's Encrypt with Cert-Manager
AWS ACM Certificate Management	AWS ACM Certificate Management
Certificate Monitoring and Renewal	Certificate Monitoring and Renewal
Automated Certificate Renewal	Automated Certificate Renewal
Certificate Pinning	Certificate Pinning

Best Practices

✅ DO

Automate certificate renewal
Use Let's Encrypt for public certs
Monitor certificate expiration
Use wildcard certs strategically
Implement certificate pinning
Rotate certificates regularly
Store keys securely
Use strong key sizes (2048+ RSA, 256+ ECDSA)

❌ DON'T

Manual certificate management
Self-signed certs in production
Share private keys
Ignore expiration warnings
Use weak key sizes
Mix dev and prod certs
Commit certs to git
Disable certificate validation

Weekly Installs

121

Repository

aj-geddes/usefu…-prompts

GitHub Stars

126

First Seen

Jan 21, 2026

Security Audits

Gen Agent Trust HubPass SocketPass SnykPass

Installed on

opencode101

gemini-cli98

codex94

cursor91

claude-code90

github-copilot82