# labca

> Self-hosted private Certificate Authority based on Let's Encrypt's Boulder, providing automated HTTPS certificates for internal apps via ACME with a web GUI.

- **Category:** Certificate Management
- **Licence:** Other
- **Latest version:** v26.04
- **Open source:** source_available
- **Languages:** Go, Go Template, JavaScript, Shell
- **Platforms:** Docker Compose
- **Tags:** Pki, Acme, Homelab, Certificate, Tls, HTTPS, Go, Docker Compose, Letsencrypt, Ca, Certificate authority, Acme Server, Boulder, Internal Ca

## Description

LabCA is a self-contained private Certificate Authority for internal and lab use, built on top of Let's Encrypt's open-source Boulder ACME server. It provides a web GUI for managing certificates, supports standard ACME clients like certbot, dehydrated, and acme-tiny, and runs via Docker Compose with multiple services including Boulder, MariaDB, Redis, Consul, pkimetal, nginx, control, and gui components. It requires a fully qualified domain name with DNS and cannot run on Raspberry Pi due to Boulder engine limitations.

## Links

- [Homepage](https://github.com/hakwerk/labca)
- [Website](https://lab-ca.net)
- [Docker](ghcr.io/hakwerk/labca-gui)
- [GitHub Repository](https://github.com/hakwerk/labca)
- [Documentation](https://github.com/hakwerk/labca/blob/master/README.md)

---
Source: https://selfhost.directory/project/labca