EXTENSIONS
Built by operatives — models, drivers, vaults, and reports, the parts that plug into Swamp.
Filter by what you need and pull what fits.
Network
DNS and network probing model that generates diverse diagnostic events.
Cloudflare/ssl Certificates
Cloudflare SSL/TLS — certificate packs, custom certificates, certificate authority
Caddy
Render, validate, and remotely apply Caddy JSON reverse-proxy configuration using a containerized Caddy runtime.
Nginx Proxy Manager
Full lifecycle management of an Nginx Proxy Manager instance. `sync` fans out one resource per proxy host, redirection host, dead host, stream, access list and certificate, plus an instance rollup that flags expiring certificates, plain-HTTP hosts and domains claimed by more than one host. The `apply*` methods are idempotent — they match an existing object by its natural key (domain set, listening port, access list name) and update it in place, so re-running a workflow converges instead of accumulating duplicates. `setEnabled` and `delete` dispatch on an object kind and take a list of ids, so a batch is one fan-out call rather than a run per id. Let's Encrypt certificates can be requested over HTTP-01 or DNS-01 (wildcards included), renewed, or replaced with uploaded PEM files.
Selfcert
Self-signed TLS certificate generator for Swamp: creates RSA-4096 certs locally using node:crypto and stores cert + key in a swamp vault.
Cert Health
TLS-certificate expiry tracker — fetch NPM-managed cert inventory and probe public-facing hosts via openssl s_client, classified by days-until-expiry.