Deploy EcuremACM with a clear procedure.

Prerequisites: Python 3.9+, pip (Docker optional)

# EcuremACM
# 1) Download
wget --post-data "passphrase=YOUR-PASSPHRASE-HERE" \
     https://ecurem.cloud/download \
     -O EcuremACM-v1.0.0.zip

unzip EcuremACM-v1.0.0.zip
cd EcuremACM-v1.0.0

# 2) Virtual environment
python3 -m venv .venv
source .venv/bin/activate

# 3) Dependencies
pip install -r requirements.txt

# 4) Configuration
cp .env.example .env

# 5) Start
python app.py

Prerequisites: Python 3.9+, pip (Docker)

# EcuremACM
# Docker Compose (recommended)
wget --post-data "passphrase=YOUR-PASSPHRASE-HERE" \
     https://ecurem.cloud/download \
     -O EcuremACM-v1.0.0.zip

unzip EcuremACM-v1.0.0.zip
cd EcuremACM-v1.0.0
# Set the required secrets
cp .env.example .env
# Set the required port
nano docker-compose.yml

sudo docker compose build --no-cache
sudo docker compose up -d
docker compose logs ecuremacm --tail=30 -f

# If needed: sudo docker compose up -d --force-recreate

# Docker build/run (alternative)
docker build -t ecuremacm .
docker run -p 8090:8000 --env-file .env \
  -v ./certificates:/app/certificates ecuremacm

Copy .env.example to .env, then adjust the values (for example, the Cloudflare token and API bearer token).

# Example (excerpt)
HOST=0.0.0.0
PORT=8090
CLOUDFLARE_TOKEN=YOUR-TOKEN-HERE
API_BEARER_TOKEN=YOUR-RANDOM-SECURE-TOKEN-HERE

Examples for other DNS providers:

AWS_ACCESS_KEY_ID=your_aws_access_key
AWS_SECRET_ACCESS_KEY=your_aws_secret_key
AZURE_SUBSCRIPTION_ID=your_azure_subscription
AZURE_TENANT_ID=your_azure_tenant
AZURE_CLIENT_ID=your_azure_client
AZURE_CLIENT_SECRET=your_azure_secret
GOOGLE_PROJECT_ID=your_gcp_project
POWERDNS_API_URL=https://your-powerdns:8081
POWERDNS_API_KEY=your_powerdns_key

Default URL: http://localhost:8090

curl http://localhost:8090/api/health

Gunicorn

gunicorn --bind 0.0.0.0:8090 --workers 4 app:app

systemd

Create /etc/systemd/system/ecuremacm.service:

[Unit]
Description=EcuremACM - Automated Certificate Management
After=network.target

[Service]
Type=simple
User=ecuremacm
WorkingDirectory=/opt/EcuremACM
Environment=PATH=/opt/EcuremACM/venv/bin
ExecStart=/opt/EcuremACM/venv/bin/gunicorn --bind 0.0.0.0:8090 --workers 4 app:app
Restart=always

[Install]
WantedBy=multi-user.target

Enable and start:

sudo systemctl daemon-reload
sudo systemctl enable ecuremacm
sudo systemctl start ecuremacm

Troubleshooting

certbot plugins --text
curl http://localhost:8090/api/health

Best practices

• Use a strong API_BEARER_TOKEN
• Restrict network access to port 8090
• Never commit the .env file
• Back up certificates/ and data/
• Apply strict file-system permissions