mazdermind/traefik-certificate-extractor repository overview

For each domain and it extracts

• fullchain (cert + intermediate)
• privkey (private key)
• all (private key + cert + intermediate)
• url (url of the certificate at the CA)

For SANs it creates symlinks to the main domain's files.

It can be used in one-shot mode or in watch-mode, monitoring changes to the acme.json. The tool creates and writes files but never removes old files or directories.

The conainer-image expects acme.json in /var/acmejson/acme.json, writes certs to /var/acmejson/certs/