NginxProxyManager / nginx-proxy-manager

Docker container for managing Nginx proxy hosts with a simple, powerful interface
https://nginxproxymanager.com
MIT License
22.26k stars 2.57k forks source link

Let's Encrypt - more DNS providers for Certbot or switch to ACME.sh / LEGO #836

Open tarkh opened 3 years ago

tarkh commented 3 years ago

Is your feature request related to a problem? Please describe. My DNS provider is REG.ru. I need to be able to manage wildcard certificates with Nginx Proxy Manager. My DNS provider did not exist in the current provider list in Nginx Proxy Manager panel. And because Nginx Proxy Manager exists in Docker Container it's really hard to alter anything.

Describe the solution you'd like There is 3 options:

  1. Add plugin for Certbot: https://github.com/free2er/certbot-regru (but it's pretty old one).
  2. Switch to ACME Shell script system: https://github.com/acmesh-official/acme.sh (tons of DNS providers).
  3. Switch to LEGO, Let's Encrypt client written in GO: https://github.com/go-acme/lego (tons of DNS providers).

Describe alternatives you've considered For now I need to manually create wildcard certificates and manage them separately from Nginx Proxy Manager.

norsemangrey commented 3 years ago

I have the same issue but with another DNS provider. The domain registrar Domainnameshop / Domeneshop Domeneshop has made a DNS authentication plugin for Certbot (https://github.com/domeneshop/certbot-dns-domeneshop). It would be great if support for this could be included in your build.

Is this possible or is there a workaround one can use?

FuXXz commented 3 years ago

Hello,

first, thank you for all the work and the great npm :)

Is there a chance to get other DNS Provider in the Manager? For me i have Serverprofis. Or is there a other way i can get wildcard certificates?

tdk1069 commented 3 years ago

Hiya, Came here to look for this, I currently use the acme.sh with the Dynu api for my wildchar certs but can't find a way in this situation. As a fall back I was hoping Custom would allow me to put a local path in that acme.sh could spit out into to pull into the container but alas no. So any options to use acme/more api providers, would be a welcomed enhancment

codeagencybe commented 3 years ago

any update yet on this topic? I'm in the same boat for ClouDNS support. They are supported out of the box via acme.sh and LEGO but both are not available in NPM. Would be great if there is some documentation how one could create perhaps a custom plugin; contribute and PR it back or something to keep this evolving.

AlexFullmoon commented 3 years ago

Similar situation with Yandex.

Optionally, some (automated) way of importing certificates from file would be nice — then we could run acme.sh in another container and output certificate to bind mount of NPM.

manelrodero commented 1 year ago

I see that this issue has been open for quite some time and my "problem" is something similar.

My DNS provider is NameSilo.com and it is not among those included in Nginx Proxy Manager.

I don't know if it would be too complicated to add some implementation to use it like this https://github.com/ethauvin/namesilo-letsencrypt.

I'm going to try to contact NameSilo to see if they have any "official" implementation and I'll let you know.

Thanks.

github-actions[bot] commented 6 months ago

Issue is now considered stale. If you want to keep it open, please comment :+1:

GalileoFe commented 6 months ago

My DNS provider is NameSilo.com Too, and it is still not among those included in Nginx Proxy Manager. Bad. is there any way to let it implement?

manelrodero commented 6 months ago

I no longer remembered this request. I'm starting to consider migrating to Cloudflare as a registrar. Namesilo prices have increased substantially.

hmoffatt commented 3 months ago

Another solution would be to allow certificates to be imported and updated at the command line. I think there may be an issue open for this already. Then users can generate their own certificates and import them automatically.

I use CNAMEs to do the DNS-01 challenge via a different domain but certbot doesn't support it. acme, Lego and dehydrated do though, but I have no way to automatically import updated certificates into NPM.