Settings

Configure your DNS provider credentials and preferences

Multi-Account Support Advanced

Single Account Providers Standard

Select the default CA for new certificate requests. You can override this per-certificate.

Let's Encrypt Configuration Free

Let's Encrypt provides free SSL certificates with automated renewal.

Select a CA provider and fill in required fields, then test the connection

Automatically renew certificates when they approach expiration

Renew certificates when they have this many days left before expiration (default: 30 days)

How long to cache DNS responses (default: 300 seconds)

Token used for API authentication. Required for API access after initial setup.

Choose where to store your SSL certificates. Local filesystem is the default and most compatible option.

Local Filesystem Storage

Certificates are stored locally in the specified directory with secure file permissions.

Test connection before saving settings

Notification Settings

Enable Notifications

Send alerts for certificate events

Weekly Digest

Summary email every Sunday at midnight (requires SMTP)

TimeWebhookEventStatusTries

Deploy Hooks

Enable Deploy Hooks

Run shell commands after certificate issuance or renewal

Commands run as the CertMate process user. Only admins can manage hooks.

Available Environment Variables

CERTMATE_DOMAIN, CERTMATE_CERT_PATH, CERTMATE_KEY_PATH, CERTMATE_FULLCHAIN_PATH, CERTMATE_EVENT

These hooks run for every domain after certificate issuance or renewal.

These hooks only run for the specified domain.

No executions yet
Time Hook Domain Event Status Duration

User Management

Local Authentication

Manage local user accounts for CertMate. Enable local authentication to require username/password login.

Require username/password login for web access

Add New User

Existing Users

Loading users...

API Keys

Scoped Access

Create and manage scoped API keys for programmatic access. Each key is assigned a role that controls its permissions.

Create New API Key

API Key Created

Copy this token now. It will not be shown again.

Existing Keys

The legacy API token (configured in the General tab) continues to work with full admin access. New integrations should use scoped API keys.

Backup & Restore

Data Protection

Create backups of your settings and certificates to prevent data loss. Restore from previous backups when needed.

Create Backup

Create atomic backups that include both settings and certificates to ensure data consistency.

Backup Information

Unified Backup: Atomic backup of both settings and certificates ensuring data consistency and preventing configuration mismatches
Backups contain sensitive data. Keep them secure and stored safely.

Existing Backups

Unified Backups (Recommended) Atomic
Loading unified backups...