le-cert-server
GitHub

DNS Providers

le-cert-server supports the DNS providers from the lego library. Credentials are configured under letsEncrypt.dnsCredentials using the normalized keys shown on each provider’s page, or the raw lego environment-variable names. They are passed to lego using strong types and are never written to the process environment.

Note: A few providers load their credentials through a third-party cloud SDK (for example AWS Route53/Lightsail, Google Cloud DNS, Azure DNS, Oracle Cloud, and OpenStack Designate). For those, the SDK discovers credentials from its own environment variables, shared credentials files, or instance metadata: only the non-secret options are listed on the provider page.

Supported providers#

Renamed providers#

lego has renamed the providers below. The old code is still accepted in letsEncrypt.dnsProvider and is mapped to the current one automatically, using the same credential keys.

Old codeCurrent code
acme-dnsacmedns
rfc2136dnsupdate