letsencrypt. This Let's Encrypt repo is an ACME client that can obtain certs and extensibly update server configurations (currently supports Apache automation, nginx support coming soon)