Let's Encrypt | DNS-01 Challenge | automation

#1

Hello,

I am planning to create a round-robin configuration on my Mail-in-a-Box DNS configuration (2 A-records pointing to different IPs) because my internet connection to my private webserver is not very stable. (getting a better/new internet connection is not possible) This gives me hope, to achieve higher “uptime” even if my website is only for very limited personal use. Anyway, now I run into troubles with the let’s encrypt certification.

I was planning to set up a DNS-01 challenge instead of HTTP-01 but I do not want to do this manually every-time. I understood there are plugins for bigger DNS/domain hosters but I was wondering, if someone achieved some kind of automation Mail-in-a-Box.

(Just as Information, here is the thread which I opened on letsencrypt which led to this question: https://community.letsencrypt.org/t/lets-encrypt-certificate-on-2-apache-servers-via-round-robin/145017/14)

1 Like
#2

I have wondered about this, too, but for a different server where I just installed this.

This looks like it might be a place to start, because otherwise I’m pretty sure your rolling your own:

#3

Oh, also be aware that if you are using wildcard certs, which for me was the reason to use the DNS01 verification option, the wildcard will only cover for the subdomains created. For example, *.example.com will cover box.example.com but will not cover ns1.box.example.com. I’m not sure if you have to specify separately *.*.example.com and *.example.com or if just *.*.example.com will also apply to box.example.com. I only just installed my first wildcard, ever.

#4

Geez, I always forget about this great project called acme.sh.

The link goes directly to the automatic DNS API integration section and I’m pretty sure there’s a configuration to get working within MiaB.

2 Likes
#5

would have given you 20 :heart: if I could

1 Like
#6

Thank you so much. I even found it:

Also the DNS API for MailinaBox can be found in the admin panel > custom dns | section: Custom DNS API

1 Like
#7

lol… I didn’t scroll through the whole thing. Thanks for that.

#8

Just to follow up on here:

The script worked. I was able to do the DNS-01 challenge with the script and it also auto-renewed 3 month later the certificates on both servers (round robin).