This is an application running in a Docker container on the Synology NAS. It was the place where the rachelski.net private certificate authority was first created and continues to be the place where I issue intermediate certificats signed by that root CA.
It is running on the Synology NAS because:
The application itself does not appear to be actively maintained and it lacks a few featurees that I would have preferred to see, but in general it suites my high level purposes.
The system appears to have a phlisopy that all certificates issued use passphrase protected private keys. These private keys are not stored in the BounCA system anywhere and thus I keep them in my BitWarden vault.
I have, in the past issued a few leaf-node certificates from BounCA, but for the most part, perfer to use Hashicorp Vault for issuing and rotating more temporary certificates.
The application frequently crashes and it is not unutual to have to start it up before doing any certificate work. I kind of consider this a security feature as it makes it harder for other people to hack.