3 ms·
> so you have to leave the keys to the kingdom lying around on whatever machine is acquiring the certs, or use a convoluted workaround like acmeproxy to avoid t
by yjftsjthsd-h 2y ago
> so you have to leave the keys to the kingdom lying around on whatever machine is acquiring the certs, or use a convoluted workaround like acmeproxy to avoid that exposure.
I thought you just created the TXT record once (manually if need be) and it didn't change when the cert is renewed?
- jsheard 2y agoNah, the value of the TXT record has to be changed every time you pull a new certificate. https://letsencrypt.org/docs/challenge-types/ https://letsencrypt.org/docs/challenge-types/ > it only makes sense to use DNS-01 challenges if your DNS provider has an API you can use to automate updates.