Have also seen a Full Certificate authority implemented using a makefile that was one of the easiest i have ever used i am also currently using it with rsync t

Have also seen a Full Certificate authority implemented using a makefile that was one of the easiest i have ever used i am also currently using it with rsync to implement a poormans dropbox on a vps host with a systemd timer unit to clean files after 30 days for sharing files with customers, a simple wrapper script dumps it in the right folder, invokes make and causes rsync to run. the makefile also haandles setup of the account like ssh-add (with restricted commands), key generation and config options (via include files)