Let's Encrypt DNS Providers
Supported list of DNS providers and settings used for Let's Encrypt SSL certificate generation
letsencrypt_dns_name
letsencrypt_dns_settings
acme-dns
ACME_DNS_API_BASE
, ACME_DNS_STORAGE_PATH
alidns
ALICLOUD_ACCESS_KEY
, ALICLOUD_SECRET_KEY
, ALICLOUD_REGION_ID
auroradns
AURORA_USER_ID
, AURORA_KEY
, AURORA_ENDPOINT
azure
AZURE_CLIENT_ID
, AZURE_CLIENT_SECRET
, AZURE_SUBSCRIPTION_ID
, AZURE_TENANT_ID
, AZURE_RESOURCE_GROUP
, [AZURE_METADATA_ENDPOINT]
bindman
BINDMAN_MANAGER_ADDRESS
bluecat
BLUECAT_SERVER_URL
, BLUECAT_USER_NAME
, BLUECAT_PASSWORD
, BLUECAT_CONFIG_NAME
, BLUECAT_DNS_VIEW
cloudns
CLOUDNS_AUTH_ID
, CLOUDNS_AUTH_PASSWORD
cloudflare
CF_API_EMAIL
, CF_API_KEY
- The Global API Key
needs to be used, not the Origin CA Key
cloudxns
CLOUDXNS_API_KEY
, CLOUDXNS_SECRET_KEY
conoha
CONOHA_TENANT_ID
, CONOHA_API_USERNAME
, CONOHA_API_PASSWORD
digitalocean
DO_AUTH_TOKEN
dnsimple
DNSIMPLE_OAUTH_TOKEN
, DNSIMPLE_BASE_URL
dnsmadeeasy
DNSMADEEASY_API_KEY
, DNSMADEEASY_API_SECRET
, DNSMADEEASY_SANDBOX
dnspod
DNSPOD_API_KEY
dode
DODE_TOKEN
dreamhost
DREAMHOST_API_KEY
duckdns
DUCKDNS_TOKEN
dyn
DYN_CUSTOMER_NAME
, DYN_USER_NAME
, DYN_PASSWORD
easydns
EASYDNS_TOKEN
, EASYDNS_KEY
External Program
exec
EXEC_PATH
exoscale
EXOSCALE_API_KEY
, EXOSCALE_API_SECRET
, EXOSCALE_ENDPOINT
fastdns
AKAMAI_CLIENT_TOKEN
, AKAMAI_CLIENT_SECRET
, AKAMAI_ACCESS_TOKEN
gandi
GANDI_API_KEY
gandiv5
GANDIV5_API_KEY
glesys
GLESYS_API_USER
, GLESYS_API_KEY
, GLESYS_DOMAIN
godaddy
GODADDY_API_KEY
, GODADDY_API_SECRET
gcloud
GCE_PROJECT
, Application Default Credentials (2) (3), [GCE_SERVICE_ACCOUNT_FILE
]
hostingde
HOSTINGDE_API_KEY
, HOSTINGDE_ZONE_NAME
HTTP request
httpreq
HTTPREQ_ENDPOINT
, HTTPREQ_MODE
, HTTPREQ_USERNAME
, HTTPREQ_PASSWORD
(1)
iij
IIJ_API_ACCESS_KEY
, IIJ_API_SECRET_KEY
, IIJ_DO_SERVICE_CODE
inwx
INWX_USERNAME
, INWX_PASSWORD
joker
JOKER_API_KEY
or JOKER_USERNAME
, JOKER_PASSWORD
lightsail
AWS_ACCESS_KEY_ID
, AWS_SECRET_ACCESS_KEY
, DNS_ZONE
linode
LINODE_API_KEY
linodev4
LINODE_TOKEN
manual
manual
none, but you need to run Traefik interactively, turn on acmeLogging
to see instructions and press Enter.
mydnsjp
MYDNSJP_MASTER_ID
, MYDNSJP_PASSWORD
namecheap
NAMECHEAP_API_USER
, NAMECHEAP_API_KEY
namesilo
NAMESILO_API_KEY
namedotcom
NAMECOM_USERNAME
, NAMECOM_API_TOKEN
, NAMECOM_SERVER
netcup
NETCUP_CUSTOMER_NUMBER
, NETCUP_API_KEY
, NETCUP_API_PASSWORD
nifcloud
NIFCLOUD_ACCESS_KEY_ID
, NIFCLOUD_SECRET_ACCESS_KEY
ns1
NS1_API_KEY
otc
OTC_DOMAIN_NAME
, OTC_USER_NAME
, OTC_PASSWORD
, OTC_PROJECT_NAME
, OTC_IDENTITY_ENDPOINT
ovh
OVH_ENDPOINT
, OVH_APPLICATION_KEY
, OVH_APPLICATION_SECRET
, OVH_CONSUMER_KEY
designate
OS_AUTH_URL
, OS_USERNAME
, OS_PASSWORD
, OS_TENANT_NAME
, OS_REGION_NAME
oraclecloud
OCI_COMPARTMENT_OCID
, OCI_PRIVKEY_FILE
, OCI_PRIVKEY_PASS
, OCI_PUBKEY_FINGERPRINT
, OCI_REGION
, OCI_TENANCY_OCID
, OCI_USER_OCID
pdns
PDNS_API_KEY
, PDNS_API_URL
rackspace
RACKSPACE_USER
, RACKSPACE_API_KEY
rfc2136
RFC2136_TSIG_KEY
, RFC2136_TSIG_SECRET
, RFC2136_TSIG_ALGORITHM
, RFC2136_NAMESERVER
route53
AWS_ACCESS_KEY_ID
, AWS_SECRET_ACCESS_KEY
, [AWS_REGION]
, [AWS_HOSTED_ZONE_ID]
or a configured user/instance IAM profile.
sakuracloud
SAKURACLOUD_ACCESS_TOKEN
, SAKURACLOUD_ACCESS_TOKEN_SECRET
selectel
SELECTEL_API_TOKEN
stackpath
STACKPATH_CLIENT_ID
, STACKPATH_CLIENT_SECRET
, STACKPATH_STACK_ID
transip
TRANSIP_ACCOUNT_NAME
, TRANSIP_PRIVATE_KEY_PATH
vegadns
SECRET_VEGADNS_KEY
, SECRET_VEGADNS_SECRET
, VEGADNS_URL
versio
VERSIO_USERNAME
, VERSIO_PASSWORD
vscale
VSCALE_API_TOKEN
vultr
VULTR_API_KEY
zoneee
ZONEEE_API_USER
, ZONEEE_API_KEY
Last updated