憑證管理系統 - SSL Certificate Management System

# Automated the end-to-end SSL certificate lifecycle, including application and generation via Google Trust Services (GTS), ZeroSSL, and Let's Encrypt.

Description:
因應人工購買憑證的繁瑣作業以及證書期限的縮短，開發申請憑證介面＋自動化生成
Developed an automated SSL certificate issuance system to streamline manual procurement processes and address shortened certificate validity periods.

Tech Stack:

• React + TypeScript
• Python3 + FastAPI
• MongoDB
• PM2 (Background Tasks)
• Docker, Dockerfile, Docker Compose

Features:

• 整合 Google、ZeroSSL 與 Let's Encrypt，提供直覺的統一管理介面。
  A unified interface integrating Google, ZeroSSL, and Let's Encrypt for streamlined management.
• 從網域驗證 (DCV) 到憑證生成與續期，實現全流程自動化。
  End-to-end automation from Domain Control Validation (DCV) to certificate issuance and renewal.
• 支援一次性 DNS 指向，解決重複驗證的困擾。
  Supports one-time DNS pointing to eliminate the need for repeated validation.

Results:

• 將複雜的申請手續簡化為單一請求，大幅降低人力成本。
  Complexity is reduced to a single request, significantly cutting down manual overhead.
• 搭配自動續約與委派功能，實現「一次設定，永久有效」。
  Achieves "set and forget" reliability through Auto-Renew and delegation features.
• 自動監控與指向驗證，確保憑證服務始終穩定運作。
  Automated monitoring and verification ensure constant certificate uptime and stability.

Architecture Overview:

sequenceDiagram
    participant App as Client Application
    participant ACME as ACME Server
    participant DB as MongoDB
    
    App->>DB: Account Create
    App->>ACME: ACME Registration (JWS)
    ACME-->>App: Registration Success (Account URL)
    App->>DB: Save Register Info
                

sequenceDiagram
    participant App as Internal Platform
    participant ACME as ACME Server (Google (GTS)/Let's Encrypt/ZeroSSL)
    participant DNS as DNS Provider (Cloudflare)
    
    App->>ACME: Order Request (new_order)
    ACME-->>App: Order Applied (Pending)
    App->>DNS: Auto Check & Verify DNS Record
    App->>ACME: Auto Challenge (DNS-01/HTTP-01)
    ACME-->>App: Order Completed (Valid)
                

sequenceDiagram
    participant Cron as PM2 Task (while True)
    participant DB as MongoDB
    participant App as ACME Core
    
    Cron->>DB: Check auto_renew Order List
    DB-->>Cron: Return Expiring Orders
    Cron->>App: Trigger ACME new_order