DNS Providers

le-cert-server supports all DNS providers supported by the lego library. The credentials are passed as environment variables that you configure in the dnsCredentials section.

See the Lego DNS Providers documentation for:

• Complete list of supported providers (100+)
• Required environment variables for each provider
• Provider-specific configuration details

The pages in this section show examples for some of the most common providers:

• Cloudflare
• AWS Route53
• DigitalOcean
• Azure DNS

Using System Environment Variables#

Alternatively, you can omit dnsCredentials from the config file and set the required environment variables directly in your system:

letsEncrypt:
  dnsProvider: "cloudflare"
  # No dnsCredentials needed if env vars are already set

Then start the server with environment variables:

export CF_DNS_API_TOKEN="your-token"
./cert-server -config config.yaml