le-cert-server
GitHub

Cloudflare

Configuration for the Cloudflare DNS provider.

See the lego documentation for full details.

letsEncrypt:
  dnsProvider: "cloudflare"
  dnsCredentials:
    # CF_API_EMAIL: Account email
    apiEmail: ""
    # CF_API_KEY: API key
    apiKey: ""
    # CF_DNS_API_TOKEN: API token with DNS:Edit permission (since v3.1.0)
    dnsAPIToken: ""
    # CF_ZONE_API_TOKEN: API token with Zone:Read permission (since v3.1.0)
    zoneAPIToken: ""
    # CLOUDFLARE_BASE_URL: API base URL (Default: https://api.cloudflare.com/client/v4)
    baseURL: ""
    # CLOUDFLARE_POLLING_INTERVAL: Time between DNS propagation check in seconds (Default: 2)
    pollingInterval: ""
    # CLOUDFLARE_PROPAGATION_TIMEOUT: Maximum waiting time for DNS propagation in seconds (Default: 120)
    propagationTimeout: ""
    # CLOUDFLARE_TTL: The TTL of the TXT record used for the DNS challenge in seconds (Default: 120)
    ttl: ""

Credentials are passed directly to lego using strong types and are never written to the process environment. You may also use the raw lego environment-variable names (and documented aliases) as keys instead of the normalized names.

Edit this page on GitHub