Skip to main content

Let's Encrypt DNS Providers

Supported list of DNS providers and settings used for Let's Encrypt SSL certificate generation

letsencrypt_dns_nameletsencrypt_dns_settings
ACME DNSacme-dnsACME_DNS_API_BASE, ACME_DNS_STORAGE_PATH
Alibaba CloudalidnsALICLOUD_ACCESS_KEY, ALICLOUD_SECRET_KEY, ALICLOUD_REGION_ID
AuroradnsauroradnsAURORA_USER_ID, AURORA_KEY, AURORA_ENDPOINT
AzureazureAZURE_CLIENT_ID, AZURE_CLIENT_SECRET, AZURE_SUBSCRIPTION_ID, AZURE_TENANT_ID, AZURE_RESOURCE_GROUP, [AZURE_METADATA_ENDPOINT]
BindmanbindmanBINDMAN_MANAGER_ADDRESS
Blue CatbluecatBLUECAT_SERVER_URL, BLUECAT_USER_NAME, BLUECAT_PASSWORD, BLUECAT_CONFIG_NAME, BLUECAT_DNS_VIEW
ClouDNScloudnsCLOUDNS_AUTH_ID, CLOUDNS_AUTH_PASSWORD
CloudflarecloudflareCF_API_EMAIL, CF_API_KEY - The Global API Key needs to be used, not the Origin CA Key
CloudXNScloudxnsCLOUDXNS_API_KEY, CLOUDXNS_SECRET_KEY
ConoHaconohaCONOHA_TENANT_ID, CONOHA_API_USERNAME, CONOHA_API_PASSWORD
DigitalOceandigitaloceanDO_AUTH_TOKEN
DNSimplednsimpleDNSIMPLE_OAUTH_TOKEN, DNSIMPLE_BASE_URL
DNS Made EasydnsmadeeasyDNSMADEEASY_API_KEY, DNSMADEEASY_API_SECRET, DNSMADEEASY_SANDBOX
DNSPoddnspodDNSPOD_API_KEY
Domain Offensive (do.de)dodeDODE_TOKEN
DreamHostdreamhostDREAMHOST_API_KEY
Duck DNSduckdnsDUCKDNS_TOKEN
DyndynDYN_CUSTOMER_NAME, DYN_USER_NAME, DYN_PASSWORD
EasyDNSeasydnsEASYDNS_TOKEN, EASYDNS_KEY
External ProgramexecEXEC_PATH
ExoscaleexoscaleEXOSCALE_API_KEY, EXOSCALE_API_SECRET, EXOSCALE_ENDPOINT
Fast DNSfastdnsAKAMAI_CLIENT_TOKEN, AKAMAI_CLIENT_SECRET, AKAMAI_ACCESS_TOKEN
GandigandiGANDI_API_KEY
Gandi v5gandiv5GANDIV5_API_KEY
GlesysglesysGLESYS_API_USER, GLESYS_API_KEY, GLESYS_DOMAIN
GoDaddygodaddyGODADDY_API_KEY, GODADDY_API_SECRET
Google Cloud DNSgcloudGCE_PROJECT, Application Default Credentials (2) (3), [GCE_SERVICE_ACCOUNT_FILE]
hosting.dehostingdeHOSTINGDE_API_KEY, HOSTINGDE_ZONE_NAME
HTTP requesthttpreqHTTPREQ_ENDPOINT, HTTPREQ_MODE, HTTPREQ_USERNAME, HTTPREQ_PASSWORD (1)
IIJiijIIJ_API_ACCESS_KEY, IIJ_API_SECRET_KEY, IIJ_DO_SERVICE_CODE
INWXinwxINWX_USERNAME, INWX_PASSWORD
Joker.comjokerJOKER_API_KEY or JOKER_USERNAME, JOKER_PASSWORD
LightsaillightsailAWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, DNS_ZONE
LinodelinodeLINODE_API_KEY
Linode v4linodev4LINODE_TOKEN
manualmanualnone, but you need to run Traefik interactively, turn on acmeLogging to see instructions and press Enter.
MyDNS.jpmydnsjpMYDNSJP_MASTER_ID, MYDNSJP_PASSWORD
NamecheapnamecheapNAMECHEAP_API_USER, NAMECHEAP_API_KEY
NamesilonamesiloNAMESILO_API_KEY
name.comnamedotcomNAMECOM_USERNAME, NAMECOM_API_TOKEN, NAMECOM_SERVER
NetcupnetcupNETCUP_CUSTOMER_NUMBER, NETCUP_API_KEY, NETCUP_API_PASSWORD
NIFCloudnifcloudNIFCLOUD_ACCESS_KEY_ID, NIFCLOUD_SECRET_ACCESS_KEY
Ns1ns1NS1_API_KEY
Open Telekom CloudotcOTC_DOMAIN_NAME, OTC_USER_NAME, OTC_PASSWORD, OTC_PROJECT_NAME, OTC_IDENTITY_ENDPOINT
OVHovhOVH_ENDPOINT, OVH_APPLICATION_KEY, OVH_APPLICATION_SECRET, OVH_CONSUMER_KEY
Openstack DesignatedesignateOS_AUTH_URL, OS_USERNAME, OS_PASSWORD, OS_TENANT_NAME, OS_REGION_NAME
Oracle CloudoraclecloudOCI_COMPARTMENT_OCID, OCI_PRIVKEY_FILE, OCI_PRIVKEY_PASS, OCI_PUBKEY_FINGERPRINT, OCI_REGION, OCI_TENANCY_OCID, OCI_USER_OCID
PowerDNSpdnsPDNS_API_KEY, PDNS_API_URL
RackspacerackspaceRACKSPACE_USER, RACKSPACE_API_KEY
RFC2136rfc2136RFC2136_TSIG_KEY, RFC2136_TSIG_SECRET, RFC2136_TSIG_ALGORITHM, RFC2136_NAMESERVER
Route 53route53AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, [AWS_REGION], [AWS_HOSTED_ZONE_ID] or a configured user/instance IAM profile.
Sakura CloudsakuracloudSAKURACLOUD_ACCESS_TOKEN, SAKURACLOUD_ACCESS_TOKEN_SECRET
SelectelselectelSELECTEL_API_TOKEN
StackpathstackpathSTACKPATH_CLIENT_ID, STACKPATH_CLIENT_SECRET, STACKPATH_STACK_ID
TransIPtransipTRANSIP_ACCOUNT_NAME, TRANSIP_PRIVATE_KEY_PATH
VegaDNSvegadnsSECRET_VEGADNS_KEY, SECRET_VEGADNS_SECRET, VEGADNS_URL
VersioversioVERSIO_USERNAME, VERSIO_PASSWORD
VscalevscaleVSCALE_API_TOKEN
VULTRvultrVULTR_API_KEY
Zone.eezoneeeZONEEE_API_USER, ZONEEE_API_KEY