VNet-isolated certificate automation for Azure. Deploys the open-source Acmebot engine with the surrounding Terraform infrastructure — Storage, Key Vault, IAM, and a hardened App Service Plan, all behind Private Endpoints.

What’s included

• Automated issuance and renewal via Let’s Encrypt (DNS-01)
• Certificates stored directly in Azure Key Vault
• System-Assigned Managed Identity — no hardcoded credentials
• Full Private Link isolation: Storage, Key Vault, and Function App all behind Private Endpoints
• Default-deny network rules, public network access disabled
• Zone-balanced production App Service Plan

Free and MIT licensed — see the full module.