» RFC2136 DNS Challenge Provider

The rfc2136 DNS challenge provider can be used to perform DNS challenges for the acme_certificate resource with RFC2136.

For complete information on how to use this provider with the acme_certifiate resource, see here.

» Example

resource "acme_certificate" "certificate" {
  ...

  dns_challenge {
    provider = "rfc2136"
  }
}

» Argument Reference

The following arguments can be either passed as environment variables, or directly through the config block in the dns_challenge argument in the acme_certificate resource. For more details, see here.

In addition, arguments can also be stored in a local file, with the path supplied by supplying the argument with the _FILE suffix. See here for more information.

• RFC2136_NAMESERVER - Network address in the form "host" or "host:port".
• RFC2136_TSIG_ALGORITHM - TSIG algorythm. See miekg/dns#tsig.go for supported values. To disable TSIG authentication, leave the RFC2136_TSIG* variables unset..
• RFC2136_TSIG_KEY - Name of the secret key as defined in DNS server configuration. To disable TSIG authentication, leave the RFC2136_TSIG* variables unset..

• RFC2136_TSIG_SECRET - Secret key payload. To disable TSIG authentication, leave theRFC2136_TSIG* variables unset..

• RFC2136_DNS_TIMEOUT - API request timeout.

• RFC2136_POLLING_INTERVAL - Time between DNS propagation check.

• RFC2136_PROPAGATION_TIMEOUT - Maximum waiting time for DNS propagation.

• RFC2136_SEQUENCE_INTERVAL - Interval between iteration.

• RFC2136_TTL - The TTL of the TXT record used for the DNS challenge.