BIND looks fantastic but I really like the restricted nature of acme-dns -- I don't know much about DNS and I don't want to inherit a huge amount of functionali

BIND looks fantastic but I really like the restricted nature of acme-dns -- I don't know much about DNS and I don't want to inherit a huge amount of functionality that I don't know how to properly administer -- I really only want to manage a nameserver for acme challenges. By "UPDATE ACL" I believe that you are referring to the DNS UPDATE RFC[0] -- it looks like cert-manager doesn't support generic UPDATEs yet[1]. [0]: https://tools.ietf.org/html/rfc2136 https://tools.ietf.org/html/rfc2136 [1]: https://github.com/jetstack/cert-manager/issues/468 https://github.com/jetstack/cert-manager/issues/468