kaechele / certbot-dns-pdns Goto Github PK

Hello I just was wondering why I cannot get a certificate for my subdomain.
This is my command
certbot --authenticator 'dns-pdns' --dns-pdns-credentials '/home/certbot/pdns-credentials.ini' certonly --debug-challenges -d dns.example.com

The corresponding error:

Error determining zone identifier for app.openvault.online: '403 Client Error: FORBIDDEN for url: http://pdns-server/api/v1/servers/localhost/zones/dns.example.com'.

and its clearly not working since the zone is not delegated. In the API reuqest it should be just example.com.

So I was looking threough the cerbot logs and found the error:

2024-07-14 12:45:32,749:DEBUG:root:Actual zone name resolved for domain app.example.com: example.com 2024-07-14 12:45:32,750:DEBUG:root:Override resolved zone name because --delegated option is set: app.example.com

I dont know why the delegated option is set, I am just using the default settings

endpoint
api
dns_pdns_server_id = localhost # see https://doc.powerdns.com/authoritative/http-api/server.html
dns_pdns_disable_notify = false # Disable notification of secondaries after record changes

my workaround is using wildcard certifacate now, maybe someone can hel me there.

Hi,
could you add the possibility to customize the propagation time.
e.g. with a commandline switch --dns-pnds-propagation-seconds=20 for example?