aboutsummaryrefslogtreecommitdiffstats
path: root/lfacme-dns.7
diff options
context:
space:
mode:
authorLexi Winter <ivy@FreeBSD.org>2025-06-04 10:42:19 +0100
committerLexi Winter <ivy@FreeBSD.org>2025-06-04 10:56:04 +0100
commit15010d062ae276a92065cd6ea7dc94b749e20756 (patch)
tree8745f89f933826afbb329b4fc447186a1200610d /lfacme-dns.7
parent09aa3870070960d37d7bdbb724f4ac7b68395fdf (diff)
downloadlfacme-15010d062ae276a92065cd6ea7dc94b749e20756.tar.gz
lfacme-15010d062ae276a92065cd6ea7dc94b749e20756.tar.bz2
allow PREFIX to be customised
Diffstat (limited to 'lfacme-dns.7')
-rw-r--r--lfacme-dns.761
1 files changed, 0 insertions, 61 deletions
diff --git a/lfacme-dns.7 b/lfacme-dns.7
deleted file mode 100644
index 5e46215..0000000
--- a/lfacme-dns.7
+++ /dev/null
@@ -1,61 +0,0 @@
-.\" This source code is released into the public domain.
-.Dd June 4, 2025
-.Dt LFACME-DNS 7
-.Os
-.Sh NAME
-.Nm lfacme-dns
-.Nd validate an ACME challenge via TSIG DNS updates
-.Sh SYNOPSIS
-In
-.Xr domains.conf 5 :
-.Bd -ragged -offset indent
-.Ar domain
-challenge=dns
-.Ed
-.Sh DESCRIPTION
-The
-.Nm
-challenge hook will respond to an ACME domain validation using a DNS-based
-.Dq dns-01
-authorization with TSIG-authenticated Dynamic DNS updates.
-To use this challenge hook, configure one or more domains with
-.Dq challenge=dns
-in
-.Xr domains.conf 5 .
-.Pp
-The
-.Dq dns-01
-challenge expects the authorization token to be created as a TXT record at the
-DNS name
-.Dq _acme-challenge. Ns Ar domain .
-When
-.Nm
-responds to the challenge, it will use
-.Xr nsupdate 1
-to create this record.
-The DNS update will be sent to the zone's master server (determined by the
-MNAME field in the SOA record), and will be authenticated using the TSIG
-key file configured by
-.Ar ACME_DNS_KEYFILE
-in
-.Xr acme.conf 5 .
-.Pp
-Once validation is complete, the previously created DNS record will be removed.
-.Sh CONFIGURATION
-The
-.Nm
-challenge hook supports the following configuration options in
-.Xr acme.conf 5 :
-.Bl -tag -width indent
-.It Va ACME_DNS_KEYFILE
-(Required.)
-The key file that will be passed to
-.Xr nsupdate 1
-to authenticate the DNS update.
-.El
-.Sh SEE ALSO
-.Xr acme.conf 5 ,
-.Xr domains.conf 5 ,
-.Xr lfacme 7 ,
-.Xr lfacme-renew 8 ,
-.Xr nsupdate 1