nginx-proxy-manager icon indicating copy to clipboard operation
nginx-proxy-manager copied to clipboard

Let's Encrypt - more DNS providers for Certbot or switch to ACME.sh / LEGO

Open tarkh opened this issue 4 years ago • 10 comments

Is your feature request related to a problem? Please describe. My DNS provider is REG.ru. I need to be able to manage wildcard certificates with Nginx Proxy Manager. My DNS provider did not exist in the current provider list in Nginx Proxy Manager panel. And because Nginx Proxy Manager exists in Docker Container it's really hard to alter anything.

Describe the solution you'd like There is 3 options:

  1. Add plugin for Certbot: https://github.com/free2er/certbot-regru (but it's pretty old one).
  2. Switch to ACME Shell script system: https://github.com/acmesh-official/acme.sh (tons of DNS providers).
  3. Switch to LEGO, Let's Encrypt client written in GO: https://github.com/go-acme/lego (tons of DNS providers).

Describe alternatives you've considered For now I need to manually create wildcard certificates and manage them separately from Nginx Proxy Manager.

tarkh avatar Jan 22 '21 17:01 tarkh

I have the same issue but with another DNS provider. The domain registrar Domainnameshop / Domeneshop Domeneshop has made a DNS authentication plugin for Certbot (https://github.com/domeneshop/certbot-dns-domeneshop). It would be great if support for this could be included in your build.

Is this possible or is there a workaround one can use?

norsemangrey avatar Jan 26 '21 20:01 norsemangrey

Hello,

first, thank you for all the work and the great npm :)

Is there a chance to get other DNS Provider in the Manager? For me i have Serverprofis. Or is there a other way i can get wildcard certificates?

FuXXz avatar Feb 09 '21 22:02 FuXXz

Hiya, Came here to look for this, I currently use the acme.sh with the Dynu api for my wildchar certs but can't find a way in this situation. As a fall back I was hoping Custom would allow me to put a local path in that acme.sh could spit out into to pull into the container but alas no. So any options to use acme/more api providers, would be a welcomed enhancment

tdk1069 avatar Feb 17 '21 08:02 tdk1069

any update yet on this topic? I'm in the same boat for ClouDNS support. They are supported out of the box via acme.sh and LEGO but both are not available in NPM. Would be great if there is some documentation how one could create perhaps a custom plugin; contribute and PR it back or something to keep this evolving.

codeagencybe avatar Mar 30 '21 09:03 codeagencybe

Similar situation with Yandex.

Optionally, some (automated) way of importing certificates from file would be nice — then we could run acme.sh in another container and output certificate to bind mount of NPM.

AlexFullmoon avatar Apr 16 '21 09:04 AlexFullmoon

I see that this issue has been open for quite some time and my "problem" is something similar.

My DNS provider is NameSilo.com and it is not among those included in Nginx Proxy Manager.

I don't know if it would be too complicated to add some implementation to use it like this https://github.com/ethauvin/namesilo-letsencrypt.

I'm going to try to contact NameSilo to see if they have any "official" implementation and I'll let you know.

Thanks.

manelrodero avatar Dec 16 '22 23:12 manelrodero

Issue is now considered stale. If you want to keep it open, please comment :+1:

github-actions[bot] avatar Mar 21 '24 01:03 github-actions[bot]

My DNS provider is NameSilo.com Too, and it is still not among those included in Nginx Proxy Manager. Bad. is there any way to let it implement?

GalileoFe avatar Mar 22 '24 07:03 GalileoFe

I no longer remembered this request. I'm starting to consider migrating to Cloudflare as a registrar. Namesilo prices have increased substantially.

manelrodero avatar Mar 25 '24 07:03 manelrodero

Another solution would be to allow certificates to be imported and updated at the command line. I think there may be an issue open for this already. Then users can generate their own certificates and import them automatically.

I use CNAMEs to do the DNS-01 challenge via a different domain but certbot doesn't support it. acme, Lego and dehydrated do though, but I have no way to automatically import updated certificates into NPM.

hmoffatt avatar Jun 29 '24 02:06 hmoffatt