Let's Encrypt DNS Providers
Supported list of DNS providers and settings used for Let's Encrypt SSL certificate generation
| letsencrypt_dns_name | letsencrypt_dns_settings | |
|---|---|---|
| ACME DNS | acme-dns | ACME_DNS_API_BASE, ACME_DNS_STORAGE_PATH |
| Alibaba Cloud | alidns | ALICLOUD_ACCESS_KEY, ALICLOUD_SECRET_KEY, ALICLOUD_REGION_ID |
| Auroradns | auroradns | AURORA_USER_ID, AURORA_KEY, AURORA_ENDPOINT |
| Azure | azure | AZURE_CLIENT_ID, AZURE_CLIENT_SECRET, AZURE_SUBSCRIPTION_ID, AZURE_TENANT_ID, AZURE_RESOURCE_GROUP, [AZURE_METADATA_ENDPOINT] |
| Bindman | bindman | BINDMAN_MANAGER_ADDRESS |
| Blue Cat | bluecat | BLUECAT_SERVER_URL, BLUECAT_USER_NAME, BLUECAT_PASSWORD, BLUECAT_CONFIG_NAME, BLUECAT_DNS_VIEW |
| ClouDNS | cloudns | CLOUDNS_AUTH_ID, CLOUDNS_AUTH_PASSWORD |
| Cloudflare | cloudflare | CF_API_EMAIL, CF_API_KEY - The Global API Key needs to be used, not the Origin CA Key |
| CloudXNS | cloudxns | CLOUDXNS_API_KEY, CLOUDXNS_SECRET_KEY |
| ConoHa | conoha | CONOHA_TENANT_ID, CONOHA_API_USERNAME, CONOHA_API_PASSWORD |
| DigitalOcean | digitalocean | DO_AUTH_TOKEN |
| DNSimple | dnsimple | DNSIMPLE_OAUTH_TOKEN, DNSIMPLE_BASE_URL |
| DNS Made Easy | dnsmadeeasy | DNSMADEEASY_API_KEY, DNSMADEEASY_API_SECRET, DNSMADEEASY_SANDBOX |
| DNSPod | dnspod | DNSPOD_API_KEY |
| Domain Offensive (do.de) | dode | DODE_TOKEN |
| DreamHost | dreamhost | DREAMHOST_API_KEY |
| Duck DNS | duckdns | DUCKDNS_TOKEN |
| Dyn | dyn | DYN_CUSTOMER_NAME, DYN_USER_NAME, DYN_PASSWORD |
| EasyDNS | easydns | EASYDNS_TOKEN, EASYDNS_KEY |
| External Program | exec | EXEC_PATH |
| Exoscale | exoscale | EXOSCALE_API_KEY, EXOSCALE_API_SECRET, EXOSCALE_ENDPOINT |
| Fast DNS | fastdns | AKAMAI_CLIENT_TOKEN, AKAMAI_CLIENT_SECRET, AKAMAI_ACCESS_TOKEN |
| Gandi | gandi | GANDI_API_KEY |
| Gandi v5 | gandiv5 | GANDIV5_API_KEY |
| Glesys | glesys | GLESYS_API_USER, GLESYS_API_KEY, GLESYS_DOMAIN |
| GoDaddy | godaddy | GODADDY_API_KEY, GODADDY_API_SECRET |
| Google Cloud DNS | gcloud | GCE_PROJECT, Application Default Credentials (2) (3), [GCE_SERVICE_ACCOUNT_FILE] |
| hosting.de | hostingde | HOSTINGDE_API_KEY, HOSTINGDE_ZONE_NAME |
| HTTP request | httpreq | HTTPREQ_ENDPOINT, HTTPREQ_MODE, HTTPREQ_USERNAME, HTTPREQ_PASSWORD (1) |
| IIJ | iij | IIJ_API_ACCESS_KEY, IIJ_API_SECRET_KEY, IIJ_DO_SERVICE_CODE |
| INWX | inwx | INWX_USERNAME, INWX_PASSWORD |
| Joker.com | joker | JOKER_API_KEY or JOKER_USERNAME, JOKER_PASSWORD |
| Lightsail | lightsail | AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, DNS_ZONE |
| Linode | linode | LINODE_API_KEY |
| Linode v4 | linodev4 | LINODE_TOKEN |
| manual | manual | none, but you need to run Traefik interactively, turn on acmeLogging to see instructions and press Enter. |
| MyDNS.jp | mydnsjp | MYDNSJP_MASTER_ID, MYDNSJP_PASSWORD |
| Namecheap | namecheap | NAMECHEAP_API_USER, NAMECHEAP_API_KEY |
| Namesilo | namesilo | NAMESILO_API_KEY |
| name.com | namedotcom | NAMECOM_USERNAME, NAMECOM_API_TOKEN, NAMECOM_SERVER |
| Netcup | netcup | NETCUP_CUSTOMER_NUMBER, NETCUP_API_KEY, NETCUP_API_PASSWORD |
| NIFCloud | nifcloud | NIFCLOUD_ACCESS_KEY_ID, NIFCLOUD_SECRET_ACCESS_KEY |
| Ns1 | ns1 | NS1_API_KEY |
| Open Telekom Cloud | otc | OTC_DOMAIN_NAME, OTC_USER_NAME, OTC_PASSWORD, OTC_PROJECT_NAME, OTC_IDENTITY_ENDPOINT |
| OVH | ovh | OVH_ENDPOINT, OVH_APPLICATION_KEY, OVH_APPLICATION_SECRET, OVH_CONSUMER_KEY |
| Openstack Designate | designate | OS_AUTH_URL, OS_USERNAME, OS_PASSWORD, OS_TENANT_NAME, OS_REGION_NAME |
| Oracle Cloud | oraclecloud | OCI_COMPARTMENT_OCID, OCI_PRIVKEY_FILE, OCI_PRIVKEY_PASS, OCI_PUBKEY_FINGERPRINT, OCI_REGION, OCI_TENANCY_OCID, OCI_USER_OCID |
| PowerDNS | pdns | PDNS_API_KEY, PDNS_API_URL |
| Rackspace | rackspace | RACKSPACE_USER, RACKSPACE_API_KEY |
| RFC2136 | rfc2136 | RFC2136_TSIG_KEY, RFC2136_TSIG_SECRET, RFC2136_TSIG_ALGORITHM, RFC2136_NAMESERVER |
| Route 53 | route53 | AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, [AWS_REGION], [AWS_HOSTED_ZONE_ID] or a configured user/instance IAM profile. |
| Sakura Cloud | sakuracloud | SAKURACLOUD_ACCESS_TOKEN, SAKURACLOUD_ACCESS_TOKEN_SECRET |
| Selectel | selectel | SELECTEL_API_TOKEN |
| Stackpath | stackpath | STACKPATH_CLIENT_ID, STACKPATH_CLIENT_SECRET, STACKPATH_STACK_ID |
| TransIP | transip | TRANSIP_ACCOUNT_NAME, TRANSIP_PRIVATE_KEY_PATH |
| VegaDNS | vegadns | SECRET_VEGADNS_KEY, SECRET_VEGADNS_SECRET, VEGADNS_URL |
| Versio | versio | VERSIO_USERNAME, VERSIO_PASSWORD |
| Vscale | vscale | VSCALE_API_TOKEN |
| VULTR | vultr | VULTR_API_KEY |
| Zone.ee | zoneee | ZONEEE_API_USER, ZONEEE_API_KEY |