Azure (deprecated)
Configuration for the Azure (deprecated) DNS provider.
See the lego documentation for full details.
letsEncrypt:
dnsProvider: "azure"
dnsCredentials:
# AZURE_CLIENT_ID: Client ID
clientID: ""
# AZURE_CLIENT_SECRET: Client secret
clientSecret: ""
# AZURE_RESOURCE_GROUP: Resource group
resourceGroup: ""
# AZURE_SUBSCRIPTION_ID: Subscription ID
subscriptionID: ""
# AZURE_TENANT_ID: Tenant ID
tenantID: ""
# AZURE_METADATA_ENDPOINT: Metadata Service endpoint URL
metadataEndpoint: ""
# AZURE_POLLING_INTERVAL: Time between DNS propagation check in seconds (Default: 2)
pollingInterval: ""
# AZURE_PRIVATE_ZONE: Set to true to use Azure Private DNS Zones and not public
privateZone: ""
# AZURE_PROPAGATION_TIMEOUT: Maximum waiting time for DNS propagation in seconds (Default: 120)
propagationTimeout: ""
# AZURE_TTL: The TTL of the TXT record used for the DNS challenge in seconds (Default: 60)
ttl: ""
# AZURE_ZONE_NAME: Zone name to use inside Azure DNS service to add the TXT record in
zoneName: ""Credentials are passed directly to lego using strong types and are never written to the process environment. You may also use the raw lego environment-variable names as keys instead of the normalized names.
This is the legacy Azure provider; prefer azuredns
for new setups.
Credentials are loaded by the Azure SDK and may also come from the standard
AZURE_* environment variables or a managed identity, which are read directly
by the SDK.