Azure DNS
Configuration for the Azure DNS DNS provider.
See the lego documentation for full details.
letsEncrypt:
dnsProvider: "azuredns"
dnsCredentials:
# AZURE_CLIENT_ID: Client ID
clientID: ""
# AZURE_CLIENT_SECRET: Client secret
clientSecret: ""
# AZURE_TENANT_ID: Tenant ID
tenantID: ""
# AZURE_AUTH_METHOD: Specify which authentication method to use
authMethod: ""
# AZURE_AUTH_MSI_TIMEOUT: Managed Identity timeout duration
authMSITimeout: ""
# AZURE_ENVIRONMENT: Azure environment, one of: public, usgovernment, and china
environment: ""
# AZURE_POLLING_INTERVAL: Time between DNS propagation check in seconds (Default: 2)
pollingInterval: ""
# AZURE_PRIVATE_ZONE: Set to true to use Azure Private DNS Zones and not public
privateZone: ""
# AZURE_PROPAGATION_TIMEOUT: Maximum waiting time for DNS propagation in seconds (Default: 120)
propagationTimeout: ""
# AZURE_RESOURCE_GROUP: DNS zone resource group
resourceGroup: ""
# AZURE_SERVICEDISCOVERY_FILTER: Advanced ServiceDiscovery filter using Kusto query condition
servicediscoveryFilter: ""
# AZURE_SUBSCRIPTION_ID: DNS zone subscription ID
subscriptionID: ""
# AZURE_TTL: The TTL of the TXT record used for the DNS challenge in seconds (Default: 60)
ttl: ""
# AZURE_ZONE_NAME: Zone name to use inside Azure DNS service to add the TXT record in
zoneName: ""Credentials are passed directly to lego using strong types and are never written to the process environment. You may also use the raw lego environment-variable names as keys instead of the normalized names.
In addition to the keys above, Azure DNS supports the Azure SDK’s other authentication methods (managed identity, Azure CLI, workload identity, and client certificates).
Those are selected via authMethod and resolved by the
Azure SDK from its own environment variables and files, including AZURE_CLIENT_CERTIFICATE_PATH for certificate authentication.
environment selects the Azure cloud to talk to and accepts public (the default), usgovernment, or china.