search

caddy-dns / duckdns

Caddy module: dns.providers.duckdns
50 stars 12 forks source link

Perform challenges sequentially #7

Closed jasperweiss closed 1 year ago

jasperweiss commented 1 year ago

Retrieving certificates for .mysubdomain.duckdns.org fails because 2 TXT records are placed (for .mysubdomain.duckdns.org and mysubdomain.duckdns.org) while DuckDNS only allows 1 TXT record to exist at a time.

See this github issue for context.

I believe the workaround would be to perform the challenges one after the other.

Edit: this repository may not be the right place for this issue.

francislavoie commented 1 year ago

Yeah unfortunately that's not something that this plugin can solve. It doesn't control when issuance happens, it just follows the ask from CertMagic which drives the issuance process.

This is an unfortunate limitation of DuckDNS. What you could do to work around it is start Caddy with only one of the domains in the config, then add the second domain ~10 minutes later and reload Caddy. That way it won't step on eachother.

This doesn't guarantee that renewal 2 months later will succeed right away though, but either way, retries should happen so it should be fine.

francislavoie commented 1 year ago

If you'd like to add a Limitations section to README mentioning this, PRs welcome.