zoraxy icon indicating copy to clipboard operation
zoraxy copied to clipboard

Add custom timeout for ACME DNS validation

Open jwgn opened this issue 1 year ago • 3 comments

Is your feature request related to a problem? Please describe. ACME DNS validation with deSEC failed multiple times. It seems the timeout is too tight. In Proxmox, I faced the same problem, adding a 30 second additional timeout in the GUI solved it.

Describe the solution you'd like Please add a customizable timeout option to the GUI.

Describe alternatives you've considered None.

Additional context This is related to discussion https://github.com/tobychui/zoraxy/discussions/268

jwgn avatar Sep 05 '24 15:09 jwgn

Error: one or more domains had a problem: [<domain>.de] acme: error: 400 :: urn:ietf:params:acme:error:dns :: DNS problem: NXDOMAIN looking up TXT for _acme-challenge.<domain>.de - check that a DNS record exists for this domain

Happens over and over again. TXT record is correctly created and deleted afterwards. Have to request the certificate a dozen times until it works. Please increase the timeout or make it customizable.

jwgn avatar Sep 19 '24 16:09 jwgn

Hey @jwgn,

What DNS service provider you are using? Have you tried HTTP challenge as a work around for now? I have just graduated last month and I am in the progress of moving to another city for my first job. I probably don't have time to fix anything in recent time, so if you need it urgently, please create a PR with the feature you want and I will try my best to review it asap. Thanks!

tobychui avatar Sep 20 '24 15:09 tobychui

I am using deSEC, as stated in the initial message. HTTP challenge works.

jwgn avatar Sep 20 '24 18:09 jwgn

Solution is here: https://github.com/tobychui/zoraxy/discussions/268#discussioncomment-11019859

[Service]
Environment="DESEC_POLLING_INTERVAL=15"
Environment="DESEC_PROPAGATION_TIMEOUT=900"
Environment="DESEC_TTL=3600"

jwgn avatar Oct 23 '24 10:10 jwgn

Feature added in v3.1.2 圖片

tobychui avatar Nov 03 '24 04:11 tobychui