Vault has been excellent, it (and Consul) runs on Solaris/SmartOS and is available through pkgsrc. Vault has been one of the most set-it-and-forget-it pieces o

Vault has been excellent, it (and Consul) runs on Solaris/SmartOS and is available through pkgsrc. Vault has been one of the most set-it-and-forget-it pieces of my infrastructure, it "just works" to hold and expire secrets. I use it to hold all my LetsEncrypt certs, my private keys get stored in Vault and I never have to expose them even to myself. I created the NodeJS package ten-ply-crest [0] (expressjs middleware) to handle this for me [1], using indutny/bud [2] as the TLS terminator with SNI. [0]: https://github.com/nextorigin/ten-ply-crest https://github.com/nextorigin/ten-ply-crest [1]: https://github.com/nextorigin/ten-ply-crest/blob/master/src/models/cert.coffee https://github.com/nextorigin/ten-ply-crest/blob/master/src/... [2]: https://github.com/indutny/bud https://github.com/indutny/bud