CertMate
CertMate is an SSL certificate management system with a web UI and REST API. It automates issuing and renewing Let's Encrypt certificates via DNS-01 challenges across 20+ DNS providers, with unified backups and multi-account support.
Deploy CertMate on Dokploy
- Install Dokploy on your server if you haven't already.
- In your Dokploy panel, open a project and click Create Service → Template.
- Search for CertMate and click Create — Dokploy configures domains, environment variables, and volumes for you.
Alternatively, create a Compose service, go to Advanced → Import from Base64, and paste this payload:
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
Configuration
The exact Docker Compose and template configuration this template deploys.
Instructions
CertMate
Getting started
- Deploy the template and open the app domain.
- Log in with the API bearer token: it is auto-generated by the template and stored in the
API_BEARER_TOKENenvironment variable (Dokploy → your service → Environment). The same token authenticates REST API requests (Authorization: Bearer <token>). - In Settings, set your Let's Encrypt email and add credentials for your DNS provider (Cloudflare, Route53, etc.) to issue certificates through DNS-01 challenges.
Notes
CLOUDFLARE_TOKENcan optionally be set as an environment variable instead of configuring it in the UI.- Certificates, application data and backups are persisted in the
certmate_certificates,certmate_dataandcertmate_backupsvolumes. - API documentation is available at
/docs/(Swagger) and/redoc/on your domain.
Related Templates
OpenResty Manager
Version: 1.2.0
The easiest using, powerful and beautiful OpenResty Manager (Nginx Enhanced Version) , open source alternative to OpenResty Edge, which can enable you to easily reverse proxy your websites with security running at home or internet, including Access Control, HTTP Flood Protection, Free SSL, without having to know too much about OpenResty or Let's Encrypt.
Ackee
Version: latest
Ackee is a self-hosted analytics tool for your website.
AdGuard Home
Version: latest
AdGuard Home is a comprehensive solution designed to enhance your online browsing experience by eliminating all kinds of ads, from annoying banners and pop-ups to intrusive video ads. It provides privacy protection, browsing security, and parental control features while maintaining website functionality.
Affine Pro
Version: stable
Affine Pro is a modern, self-hosted platform designed for collaborative content creation and project management. It offers an intuitive interface, seamless real-time collaboration, and powerful tools for organizing tasks, notes, and ideas.
Agent DVR
Version: latest
Agent DVR is a comprehensive video surveillance software with motion detection, alerts, and remote access capabilities.
Akaunting
Version: latest
Akaunting is a self-hosted, open-source accounting app for small businesses.
Self-host CertMate in minutes
Dokploy is a free, open source deployment platform. Deploy CertMate and 499+ other templates on your own infrastructure with a single click.