I am planning to create a round-robin configuration on my Mail-in-a-Box DNS configuration (2 A-records pointing to different IPs) because my internet connection to my private webserver is not very stable. (getting a better/new internet connection is not possible) This gives me hope, to achieve higher “uptime” even if my website is only for very limited personal use. Anyway, now I run into troubles with the let’s encrypt certification.
I was planning to set up a DNS-01 challenge instead of HTTP-01 but I do not want to do this manually every-time. I understood there are plugins for bigger DNS/domain hosters but I was wondering, if someone achieved some kind of automation Mail-in-a-Box.
Oh, also be aware that if you are using wildcard certs, which for me was the reason to use the DNS01 verification option, the wildcard will only cover for the subdomains created. For example, *.example.com will cover box.example.com but will not cover ns1.box.example.com. I’m not sure if you have to specify separately *.*.example.com and *.example.com or if just *.*.example.com will also apply to box.example.com. I only just installed my first wildcard, ever.
The script worked. I was able to do the DNS-01 challenge with the script and it also auto-renewed 3 month later the certificates on both servers (round robin).