certbot-dns-kas 1.0.0rc1

All-Inkl KAS DNS Authenticator plugin for Certbot

Certbot DNS All-Inkl (KAS) Plugin

This is a Certbot plugin for the All-Inkl DNS service (KAS).
It automates the process of completing dns-01 challenges by creating and removing TXT records via the KAS API.

Disclaimer: This plugin was developed with the assistance of AI. While it has been verified to work in production environments, please review the code and test carefully before using it in critical systems. Use at your own risk.

Installation

Via Pip (PyPI)

pip install certbot-dns-kas

From Source

pip install git+https://github.com/mobilandi/certbot-dns-kas.git

Usage

1. Create a credentials file (e.g., credentials.ini):

   dns_kas_user = your_kas_login
   dns_kas_password = your_kas_password
   

   (Ensure this file is only readable by root/owner: chmod 600 credentials.ini)

2. Run Certbot:

   certbot certonly \
     --authenticator dns-kas \
     --dns-kas-credentials credentials.ini \
     -d example.com -d *.example.com
   

Nginx Proxy Manager Integration

To use this plugin with Nginx Proxy Manager, you can install it into the running container.

1. Enter the container and install:

   docker exec -it nginx-proxy-manager sh -c "export SETUPTOOLS_USE_DISTUTILS=stdlib && pip install git+https://github.com/mobilandi/certbot-dns-kas.git"
   

2. Configure dns-plugins.json (usually in /app/certbot/dns-plugins.json):

   "kas": {
     "name": "All-Inkl (KAS)",
     "package_name": "certbot-dns-kas",
     "version": "~=1.0",
     "dependencies": "",
     "credentials": "dns_kas_user = your_kas_user\ndns_kas_password = your_kas_password",
     "full_plugin_name": "dns-kas"
   }
   

3. Restart the container.

Development

Running Tests

pip install -e .
pip install pytest
python -m pytest tests

How it works

The plugin talks to the All-Inkl KAS SOAP API directly (only requests is required at runtime) and resolves the correct DNS zone from your account's domain list, so it works for any TLD depth including multi-label suffixes such as .or.at or .co.uk.