pogpp/lego
1
0
Fork 0
forked from TrueCloudLab/lego
Code Pull requests Activity
lego/docs/content/dns/zz_gen_pdns.md
Pieter Lexis 83c626d9a1
powerdns: several improvements (#1374)
2021-03-17 09:53:38 +01:00

2.4 KiB
Raw Blame History

title date draft slug
PowerDNS 2019-03-03T16:39:46+01:00 false pdns

Since: v0.4.0

Configuration for PowerDNS.

  • Code: pdns

Here is an example bash command using the PowerDNS provider:

PDNS_API_URL=http://pdns-server:80/ \
PDNS_API_KEY=xxxx \
lego --email myemail@example.com --dns pdns --domains my.example.org run

Credentials

Environment Variable Name Description
PDNS_API_KEY API key
PDNS_API_URL API URL

The environment variable names can be suffixed by _FILE to reference a file instead of a value. More information here.

Additional Configuration

Environment Variable Name Description
PDNS_HTTP_TIMEOUT API request timeout
PDNS_POLLING_INTERVAL Time between DNS propagation check
PDNS_PROPAGATION_TIMEOUT Maximum waiting time for DNS propagation
PDNS_SERVER_NAME Name of the server in the URL, 'localhost' by default
PDNS_TTL The TTL of the TXT record used for the DNS challenge

The environment variable names can be suffixed by _FILE to reference a file instead of a value. More information here.

Information

Tested and confirmed to work with PowerDNS authoritative server 3.4.8 and 4.0.1. Refer to PowerDNS documentation instructions on how to enable the built-in API interface.

PowerDNS Notes:

  • PowerDNS API does not currently support SSL, therefore you should take care to ensure that traffic between lego and the PowerDNS API is over a trusted network, VPN etc.
  • In order to have the SOA serial automatically increment each time the _acme-challenge record is added/modified via the API, set SOA-EDIT-API to INCEPTION-INCREMENT for the zone in the domainmetadata table

More information