Skip to content

DNS-01 Providers

Cloudflare

yaml
autocert:
  provider: cloudflare
  options:
    auth_token:

auth_token your zone API token

Follow this guide to create a new token with Zone.DNS read and edit permissions

CloudDNS

yaml
autocert:
  provider: clouddns
  options:
    client_id:
    email:
    password:

DuckDNS

yaml
autocert:
  provider: duckdns
  options:
    token:

Tested by earvingad

OVHCloud

yaml
autocert:
  provider: ovh
  options:
    api_endpoint:
    application_key:
    application_secret:
    consumer_key:
    oauth2_config:
      client_id:
      client_secret:

Note, application_key and oauth2_config CANNOT be used together

  • api_endpoint: Endpoint URL, or one of
    • ovh-eu,
    • ovh-ca,
    • ovh-us,
    • kimsufi-eu,
    • kimsufi-ca,
    • soyoustart-eu,
    • soyoustart-ca
  • application_secret
  • application_key
  • consumer_key
  • oauth2_config: Client ID and Client Secret
    • client_id
    • client_secret

Porkbun

yaml
autocert:
  provider: porkbun
  options:
    api_key:
    secret_api_key:

Others

NOTE

A full list of provider names can be found here

Full documentation of LEGO supported providers can be found here here.

WARNING

Anything not listed above are untested, please submit an issue if any of them doesn't work.

CloudDNS as an example (from https://go-acme.github.io/lego/dns/clouddns/)

Option 1

Set these in .env

bash
CLOUDDNS_CLIENT_ID=bLsdFAks23429841238feb177a572aX
CLOUDDNS_EMAIL=you@example.com
CLOUDDNS_PASSWORD=b9841238feb177a84330f

Option 2

Set these in config.yml autocert.options section

Turn them into:

yaml
autocert:
  ...
  provider: clouddns
  options:
    client_id: bLsdFAks23429841238feb177a572aX
    email: you@example.com
    password: b9841238feb177a84330f

Released under the MIT License.