4 ms·

Any DNS service which allows you to create a CNAME RR supports it. You delegate the subdomain to any DNS server you wish. This isn't some special "Let's Encryp

• Avamander 7y ago
  > Any DNS service which allows you to create a CNAME RR supports it. And which of those also have an API that is supported by Certbot? I would really like names where a setup like this has been tested and works.
  • throw0101a 7y ago
    > And which of those also have an API that is supported by Certbot? Certbot allows for hook scripts, and you can use a utility that can talk multiple APIs: * https://github.com/AnalogJ/lexicon https://github.com/AnalogJ/lexicon > I would really like names where a setup like this has been tested and works. The guy who runs BSDCan and PgCon uses it for his personal stuff as well as FreshPorts.org, etc: * https://dan.langille.org/2017/05/31/creating-a-txt-only-nsupdate-connection-for-lets-encrypt/ https://dan.langille.org/2017/05/31/creating-a-txt-only-nsup... * https://dan.langille.org/2019/02/01/acme-domain-alias-mode/ https://dan.langille.org/2019/02/01/acme-domain-alias-mode/ He used acme.sh, though I'm more partial to dehydrated: * https://github.com/dehydrated-io/dehydrated/wiki/example-dns-01-nsupdate-script https://github.com/dehydrated-io/dehydrated/wiki/example-dns... We use it at work, but I don't want to dox myself. :)