OPNsense package and K8s operator to make rotating OPNsense certs easier.
  • Go 67.2%
  • PHP 31.8%
  • Makefile 0.6%
  • Shell 0.4%
Find a file
Repository files (latest commit first)
Filename Latest commit message Latest commit date
2026-10-19 01:03:09 +09:00
plugin Add OPNsense certificate activation plugin 2026-10-19 01:03:09 +09:00
.gitignore Set up Ostension project and licensing 2026-10-19 01:03:07 +09:00
.mdformat.toml Set up Ostension project and licensing 2026-10-19 01:03:07 +09:00
go.mod Set up Ostension project and licensing 2026-10-19 01:03:07 +09:00
LICENSE Set up Ostension project and licensing 2026-10-19 01:03:07 +09:00
NOTICE Set up Ostension project and licensing 2026-10-19 01:03:07 +09:00
README.md Set up Ostension project and licensing 2026-10-19 01:03:07 +09:00

Ostension

Vault-signed OPNsense WebGUI certificates with transactional activation and rollback.

Component Responsibility
Rotator Certificate issuance and rotation.
Plugin Local activation and rollback.

Vault access stays outside OPNsense; rollback stays on the appliance so it works when the WebGUI is unreachable.

Toolchain: Go 1.26.7 · PHP 8.3.35.

BSD 2-Clause · Notices