SSLMate it is a certificate reseller with a convenient (for me) interface – a CLI program. It's no fun copy-pasting certificates from email attachments. I'm us

SSLMate it is a certificate reseller with a convenient (for me) interface – a CLI program. It's no fun copy-pasting certificates from email attachments. I'm using both RSA and ECDSA certificates (RSA for compatibility with old clients, ECDSA for efficiency). I'm not sure but looks like ECDSA is not yet generally available from Lets Encrypt. On sops: the secrets (passwords, API keys, access tokens) are sitting in an encrypted file ("vault"). When a Fabric task needs secrets to fill in a configuration file template, it calls sops to decrypt the vault. My Yubikey starts flashing, I tap the key, Fabric task receives the secrets and can continue.