Skip to content
GitLab
Menu
Projects
Groups
Snippets
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in
Toggle navigation
Menu
Open sidebar
ruanhaishen
Acme.Sh
Commits
6fdd2f40
Unverified
Commit
6fdd2f40
authored
Dec 17, 2018
by
neil
Committed by
GitHub
Dec 17, 2018
Browse files
Merge pull request #1963 from cshoredaniel/pr-allow-dyn-standard-dns
Allow dyn standard dns and debug nsupdate
parents
238990a2
1a774909
Changes
2
Hide whitespace changes
Inline
Side-by-side
dnsapi/README.md
View file @
6fdd2f40
...
...
@@ -146,13 +146,17 @@ Finally, make the DNS server and update Key available to `acme.sh`
export NSUPDATE_SERVER="dns.example.com"
export NSUPDATE_KEY="/path/to/your/nsupdate.key"
```
and optionally (depending on DNS server)
```
export NSUPDATE_ZONE="example.com"
```
Ok, let's issue a cert now:
```
acme.sh --issue --dns dns_nsupdate -d example.com -d www.example.com
```
The
`NSUPDATE_SERVER`
and
`NSUPDATE_
KEY
`
settings will be saved in
`~/.acme.sh/account.conf`
and will be reused when needed.
The
`NSUPDATE_SERVER`
,
`NSUPDATE_KEY`
,
and
`NSUPDATE_
ZONE
`
settings will be saved in
`~/.acme.sh/account.conf`
and will be reused when needed.
## 8. Use LuaDNS domain API
...
...
dnsapi/dns_nsupdate.sh
View file @
6fdd2f40
...
...
@@ -13,12 +13,24 @@ dns_nsupdate_add() {
_saveaccountconf NSUPDATE_SERVER
"
${
NSUPDATE_SERVER
}
"
_saveaccountconf NSUPDATE_SERVER_PORT
"
${
NSUPDATE_SERVER_PORT
}
"
_saveaccountconf NSUPDATE_KEY
"
${
NSUPDATE_KEY
}
"
_saveaccountconf NSUPDATE_ZONE
"
${
NSUPDATE_ZONE
}
"
_info
"adding
${
fulldomain
}
. 60 in txt
\"
${
txtvalue
}
\"
"
nsupdate
-k
"
${
NSUPDATE_KEY
}
"
<<
EOF
[
-n
"
$DEBUG
"
]
&&
[
"
$DEBUG
"
-ge
"
$DEBUG_LEVEL_1
"
]
&&
nsdebug
=
"-d"
[
-n
"
$DEBUG
"
]
&&
[
"
$DEBUG
"
-ge
"
$DEBUG_LEVEL_2
"
]
&&
nsdebug
=
"-D"
if
[
-z
"
${
NSUPDATE_ZONE
}
"
]
;
then
nsupdate
-k
"
${
NSUPDATE_KEY
}
"
$nsdebug
<<
EOF
server
${
NSUPDATE_SERVER
}
${
NSUPDATE_SERVER_PORT
}
update add
${
fulldomain
}
. 60 in txt "
${
txtvalue
}
"
send
EOF
else
nsupdate
-k
"
${
NSUPDATE_KEY
}
"
$nsdebug
<<
EOF
server
${
NSUPDATE_SERVER
}
${
NSUPDATE_SERVER_PORT
}
zone
${
NSUPDATE_ZONE
}
.
update add
${
fulldomain
}
. 60 in txt "
${
txtvalue
}
"
send
EOF
fi
if
[
$?
-ne
0
]
;
then
_err
"error updating domain"
return
1
...
...
@@ -34,11 +46,22 @@ dns_nsupdate_rm() {
[
-n
"
${
NSUPDATE_SERVER
}
"
]
||
NSUPDATE_SERVER
=
"localhost"
[
-n
"
${
NSUPDATE_SERVER_PORT
}
"
]
||
NSUPDATE_SERVER_PORT
=
53
_info
"removing
${
fulldomain
}
. txt"
nsupdate
-k
"
${
NSUPDATE_KEY
}
"
<<
EOF
[
-n
"
$DEBUG
"
]
&&
[
"
$DEBUG
"
-ge
"
$DEBUG_LEVEL_1
"
]
&&
nsdebug
=
"-d"
[
-n
"
$DEBUG
"
]
&&
[
"
$DEBUG
"
-ge
"
$DEBUG_LEVEL_2
"
]
&&
nsdebug
=
"-D"
if
[
-z
"
${
NSUPDATE_ZONE
}
"
]
;
then
nsupdate
-k
"
${
NSUPDATE_KEY
}
"
$nsdebug
<<
EOF
server
${
NSUPDATE_SERVER
}
${
NSUPDATE_SERVER_PORT
}
update delete
${
fulldomain
}
. txt
send
EOF
else
nsupdate
-k
"
${
NSUPDATE_KEY
}
"
$nsdebug
<<
EOF
server
${
NSUPDATE_SERVER
}
${
NSUPDATE_SERVER_PORT
}
zone
${
NSUPDATE_ZONE
}
.
update delete
${
fulldomain
}
. txt
send
EOF
fi
if
[
$?
-ne
0
]
;
then
_err
"error updating domain"
return
1
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment