Syscert

A small certificate authority for fleets that need TLS without running a full PKI. It issues, renews and distributes certificates from one place.

It started as a fix for a bad renewal night and turned into a service in its own right, now at syscert.tfindley.dev.