
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
A modern, secure web interface for managing Certbot SSL/TLS certificates.
The easiest way to deploy Certbot UI is using Docker:
# Navigate to docker directory
cd docker
# Copy and configure environment
cp .env.example .env
nano .env # Edit JWT_SECRET and other settings
# Start with pre-built images from GitHub Container Registry
docker-compose up -d
# Or build locally
docker-compose -f docker-compose.local.yml up -d
Access at:
For detailed deployment instructions, see Docker Documentation.
# Install dependencies
npm install
# Start development servers (frontend + backend)
npm run dev
# Or start individually
npm run dev:backend
npm run dev:frontend
The frontend will be available at http://localhost:3000 and the backend at http://localhost:5000.
# Build both frontend and backend
npm run build
# Or build individually
npm run build:backend
npm run build:frontend
# Run all tests
npm test
# Run tests with coverage
npm run test:coverage --workspaces
certbot-ui/
├── backend/ # Express API server
│ ├── src/
│ │ ├── config/ # Configuration files
│ │ ├── controllers/ # Route controllers
│ │ ├── middleware/ # Express middleware
│ │ ├── routes/ # API routes
│ │ ├── services/ # Business logic
│ │ ├── types/ # TypeScript types
│ │ └── utils/ # Utility functions
│ └── package.json
├── frontend/ # React application
│ ├── src/
│ │ ├── components/ # React components
│ │ ├── pages/ # Page components
│ │ ├── hooks/ # Custom React hooks
│ │ ├── services/ # API services
│ │ ├── store/ # State management
│ │ └── types/ # TypeScript types
│ └── package.json
└── package.json # Root package (workspaces)
Copy .env.example to .env in the backend directory and configure:
JWT_SECRET: Secure random string for JWT signingCERTBOT_PATH: Path to certbot binaryCERTBOT_CONFIG_DIR: Certbot configuration directory⚠️ Important Security Notes:
Comprehensive documentation is available in the docs/ directory:
The application can be deployed using Docker Compose with Cloudflare Tunnels for secure internet access:
# Start all services (backend, frontend, and tunnel)
docker compose up -d
# View logs
docker compose logs -f
# Stop services
docker compose down
See the Cloudflare Tunnel Setup Guide for details on exposing your services to the internet.
MIT
Contributions are welcome! Please read the Contributing Guide first.
FAQs
Modern web interface for managing Certbot SSL/TLS certificates
We found that certbot-ui demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.