Go to file
Daniel Martinez aac9b3c659 ignore modified ddns cleanup and update files 2020-05-25 21:50:18 -04:00
.gitignore ignore modified ddns cleanup and update files 2020-05-25 21:50:18 -04:00
LICENSE.md added more info, fixed script, added license 2020-04-25 08:08:25 -04:00
README.md added more info, fixed script, added license 2020-04-25 08:08:25 -04:00
ddns_cleanup added scripts for validating from a remote server 2020-05-11 22:58:02 -04:00
ddns_cleanup.template added scripts for validating from a remote server 2020-05-11 22:58:02 -04:00
ddns_update added scripts for validating from a remote server 2020-05-11 22:58:02 -04:00
ddns_update.template added scripts for validating from a remote server 2020-05-11 22:58:02 -04:00
remote-server-authenticator-hook.sh added scripts for validating from a remote server 2020-05-11 22:58:02 -04:00
remote-server-cleanup.sh added scripts for validating from a remote server 2020-05-11 22:58:02 -04:00
same-server-authenticator-hook.sh added conditional for renewing the second-level domain 2020-05-11 15:47:54 -04:00
same-server-cleanup.sh added conditional for renewing the second-level domain 2020-05-11 15:47:54 -04:00

README.md

Certbot authentication hooks for knot DNS

KnotDNS is my preferred authoritative DNS, so I wrote these quick scripts for certbot authentication.
There are two versions, one for when the DNS is being hosted at the same location as the certbot request, and one for where we have to send a DNS update to the authoritative DNS server, such as when behind an dynamic IP.

To use, simply run the certbot command with the following flags: certbot certonly --manual --preferred-challenges=dns --manual-public-ip-logging-ok --manual-auth-hook /path/to/certbot_knot_hooks/same-server-authenticator-hook.sh --manual-cleanup-hook /path/to/certbot_knot_hooks/same-server-cleanup-hook.sh a.test.example.com