Amazon Lightsail

Configuration for the Amazon Lightsail DNS provider.

See the lego documentation for full details.

letsEncrypt:
  dnsProvider: "lightsail"
  dnsCredentials:
    # DNS_ZONE: Domain name of the DNS zone
    zone: ""
    # LIGHTSAIL_POLLING_INTERVAL: Time between DNS propagation check in seconds (Default: 2)
    pollingInterval: ""
    # LIGHTSAIL_PROPAGATION_TIMEOUT: Maximum waiting time for DNS propagation in seconds (Default: 120)
    propagationTimeout: ""

Credentials are passed directly to lego using strong types and are never written to the process environment. You may also use the raw lego environment-variable names as keys instead of the normalized names.

Lightsail uses the AWS SDK, which discovers credentials from its own sources: the AWS_ACCESS_KEY_ID/AWS_SECRET_ACCESS_KEY environment variables, a shared credentials file (AWS_SHARED_CREDENTIALS_FILE), an assumed role, or an instance role. These are read directly by the AWS SDK and cannot be set through dnsCredentials.