I keep meaning to deploy Mandos in my homelab:

https://www.recompile.se/mandos