SHSelfHostIndex
LE

lego

Let's Encrypt and ACME client written in Go

Reverse Proxy & Gateways ★ 9.9k stars Easy setup MIT

lego is an open-source ACME client and library for obtaining TLS certificates from Let's Encrypt and other ACME providers. It supports many DNS providers and is self-hosted for certificate automation.

Official siteSource code

Key features

  • ACME certificate client
  • 150+ DNS providers
  • Single binary
  • Usable as a library

Strengths

  • Released under the MIT license
  • Easy to set up — beginner-friendly
  • First-class Docker support for quick deployment
  • Mature project with 9.9k GitHub stars

Is lego secure?

No known vulnerabilities affect lego's latest release (v5.5.2). OSV.dev lists 2 past advisories for the project; none of them applies to this release. No known vulnerabilities is not proof of security: it means none have been publicly catalogued.

  • Most recent fixed advisory CVE-2026-40611, published 2026-04-21 (176 days ago), fixed in 4.34.0

Source: OSV.dev, checked 2026-10-14. How this is measured.

lego replaces

Self-hosted Certbot alternatives

Health badge

Maintain lego? Add its health score to your README. The badge links back to this page.

SelfHostIndex: 94 · excellent

Markdown
[![SelfHostIndex health score for lego](https://selfhostindex.com/badge/lego-acme.svg)](https://selfhostindex.com/app/lego-acme/)
HTML
<a href="https://selfhostindex.com/app/lego-acme/"><img src="https://selfhostindex.com/badge/lego-acme.svg" alt="SelfHostIndex health score for lego"></a>
reStructuredText
.. image:: https://selfhostindex.com/badge/lego-acme.svg
   :alt: SelfHostIndex health score for lego
   :target: https://selfhostindex.com/app/lego-acme/

The score is recomputed on every nightly rebuild from public repository data — see how it is calculated.

Compare lego

2 head-to-head comparisons.

Similar reverse proxy & gateways apps