Let's Encrypt DNS Providers

Supported list of DNS providers and settings used for Let's Encrypt SSL certificate generation

letsencrypt_dns_name

letsencrypt_dns_settings

acme-dns

ACME_DNS_API_BASE, ACME_DNS_STORAGE_PATH

alidns

ALICLOUD_ACCESS_KEY, ALICLOUD_SECRET_KEY, ALICLOUD_REGION_ID

auroradns

AURORA_USER_ID, AURORA_KEY, AURORA_ENDPOINT

azure

AZURE_CLIENT_ID, AZURE_CLIENT_SECRET, AZURE_SUBSCRIPTION_ID, AZURE_TENANT_ID, AZURE_RESOURCE_GROUP, [AZURE_METADATA_ENDPOINT]

bindman

BINDMAN_MANAGER_ADDRESS

bluecat

BLUECAT_SERVER_URL, BLUECAT_USER_NAME, BLUECAT_PASSWORD, BLUECAT_CONFIG_NAME, BLUECAT_DNS_VIEW

cloudns

CLOUDNS_AUTH_ID, CLOUDNS_AUTH_PASSWORD

cloudflare

CF_API_EMAIL, CF_API_KEY - The Global API Key needs to be used, not the Origin CA Key

cloudxns

CLOUDXNS_API_KEY, CLOUDXNS_SECRET_KEY

conoha

CONOHA_TENANT_ID, CONOHA_API_USERNAME, CONOHA_API_PASSWORD

digitalocean

DO_AUTH_TOKEN

dnsimple

DNSIMPLE_OAUTH_TOKEN, DNSIMPLE_BASE_URL

dnsmadeeasy

DNSMADEEASY_API_KEY, DNSMADEEASY_API_SECRET, DNSMADEEASY_SANDBOX

dnspod

DNSPOD_API_KEY

dode

DODE_TOKEN

dreamhost

DREAMHOST_API_KEY

duckdns

DUCKDNS_TOKEN

dyn

DYN_CUSTOMER_NAME, DYN_USER_NAME, DYN_PASSWORD

easydns

EASYDNS_TOKEN, EASYDNS_KEY

External Program

exec

EXEC_PATH

exoscale

EXOSCALE_API_KEY, EXOSCALE_API_SECRET, EXOSCALE_ENDPOINT

fastdns

AKAMAI_CLIENT_TOKEN, AKAMAI_CLIENT_SECRET, AKAMAI_ACCESS_TOKEN

gandi

GANDI_API_KEY

gandiv5

GANDIV5_API_KEY

glesys

GLESYS_API_USER, GLESYS_API_KEY, GLESYS_DOMAIN

godaddy

GODADDY_API_KEY, GODADDY_API_SECRET

gcloud

GCE_PROJECT, Application Default Credentials (2) (3), [GCE_SERVICE_ACCOUNT_FILE]

hostingde

HOSTINGDE_API_KEY, HOSTINGDE_ZONE_NAME

HTTP request

httpreq

HTTPREQ_ENDPOINT, HTTPREQ_MODE, HTTPREQ_USERNAME, HTTPREQ_PASSWORD (1)

iij

IIJ_API_ACCESS_KEY, IIJ_API_SECRET_KEY, IIJ_DO_SERVICE_CODE

inwx

INWX_USERNAME, INWX_PASSWORD

joker

JOKER_API_KEY or JOKER_USERNAME, JOKER_PASSWORD

lightsail

AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, DNS_ZONE

linode

LINODE_API_KEY

linodev4

LINODE_TOKEN

manual

manual

none, but you need to run Traefik interactively, turn on acmeLogging to see instructions and press Enter.

mydnsjp

MYDNSJP_MASTER_ID, MYDNSJP_PASSWORD

namecheap

NAMECHEAP_API_USER, NAMECHEAP_API_KEY

namesilo

NAMESILO_API_KEY

namedotcom

NAMECOM_USERNAME, NAMECOM_API_TOKEN, NAMECOM_SERVER

netcup

NETCUP_CUSTOMER_NUMBER, NETCUP_API_KEY, NETCUP_API_PASSWORD

nifcloud

NIFCLOUD_ACCESS_KEY_ID, NIFCLOUD_SECRET_ACCESS_KEY

ns1

NS1_API_KEY

otc

OTC_DOMAIN_NAME, OTC_USER_NAME, OTC_PASSWORD, OTC_PROJECT_NAME, OTC_IDENTITY_ENDPOINT

ovh

OVH_ENDPOINT, OVH_APPLICATION_KEY, OVH_APPLICATION_SECRET, OVH_CONSUMER_KEY

designate

OS_AUTH_URL, OS_USERNAME, OS_PASSWORD, OS_TENANT_NAME, OS_REGION_NAME

oraclecloud

OCI_COMPARTMENT_OCID, OCI_PRIVKEY_FILE, OCI_PRIVKEY_PASS, OCI_PUBKEY_FINGERPRINT, OCI_REGION, OCI_TENANCY_OCID, OCI_USER_OCID

pdns

PDNS_API_KEY, PDNS_API_URL

rackspace

RACKSPACE_USER, RACKSPACE_API_KEY

rfc2136

RFC2136_TSIG_KEY, RFC2136_TSIG_SECRET, RFC2136_TSIG_ALGORITHM, RFC2136_NAMESERVER

route53

AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, [AWS_REGION], [AWS_HOSTED_ZONE_ID] or a configured user/instance IAM profile.

sakuracloud

SAKURACLOUD_ACCESS_TOKEN, SAKURACLOUD_ACCESS_TOKEN_SECRET

selectel

SELECTEL_API_TOKEN

stackpath

STACKPATH_CLIENT_ID, STACKPATH_CLIENT_SECRET, STACKPATH_STACK_ID

transip

TRANSIP_ACCOUNT_NAME, TRANSIP_PRIVATE_KEY_PATH

vegadns

SECRET_VEGADNS_KEY, SECRET_VEGADNS_SECRET, VEGADNS_URL

versio

VERSIO_USERNAME, VERSIO_PASSWORD

vscale

VSCALE_API_TOKEN

vultr

VULTR_API_KEY

zoneee

ZONEEE_API_USER, ZONEEE_API_KEY

Last updated