EXTENSIONS
Built by operatives — models, drivers, vaults, and reports, the parts that plug into Swamp.
Filter by what you need and pull what fits.
Cloudflare/ssl Certificates
Cloudflare SSL/TLS — certificate packs, custom certificates, certificate authority
Network
DNS and network probing model that generates diverse diagnostic events.
Tls Cert Expiry
Standalone TLS certificate expiry checker. Give it hostnames, get back days-until-expiry — no external service dependency.
Caddy
Render, validate, and remotely apply Caddy JSON reverse-proxy configuration using a containerized Caddy runtime.
Nginx Proxy Manager
Full lifecycle management of an Nginx Proxy Manager instance. `sync` fans out one resource per proxy host, redirection host, dead host, stream, access list and certificate, plus an instance rollup that flags expiring certificates, plain-HTTP hosts and domains claimed by more than one host. The `apply*` methods are idempotent — they match an existing object by its natural key (domain set, listening port, access list name) and update it in place, so re-running a workflow converges instead of accumulating duplicates. `setEnabled` and `delete` dispatch on an object kind and take a list of ids, so a batch is one fan-out call rather than a run per id. Let's Encrypt certificates can be requested over HTTP-01 or DNS-01 (wildcards included), renewed, or replaced with uploaded PEM files.
Selfcert
Self-signed TLS certificate generator for Swamp: creates RSA-4096 certs locally using node:crypto and stores cert + key in a swamp vault.
Cert Health
TLS-certificate expiry tracker — fetch NPM-managed cert inventory and probe public-facing hosts via openssl s_client, classified by days-until-expiry.