certbot-dns-regru

Reg.ru DNS authenticator plugin for Certbot

English | Русский

An authenticator plugin for certbot to support Let's Encrypt DNS challenges (dns-01) for domains managed by the nameservers of Reg.ru.

Huge thanks to @free2er for creating initial version

Requirements

• certbot (>=0.21.1)

For older Ubuntu distributions check out this PPA: ppa:certbot/certbot

Installation

1. First install the plugin:

   sudo pip install certbot-dns-regru
   

2. Configure it with your Reg.ru Credentials:

   sudo nano /etc/letsencrypt/regru.ini
   

   Add provider configuration. It is strongly advised to use API password and not your regular password (can be set here)

   dns_regru_username=<USERNAME>
   dns_regru_password=<PASSWORD>
   

   Reg.ru now requires client certificate (mTLS) authentication for its API. If you have enabled SSL authentication for the API, provide the paths to your client certificate and key:

   dns_regru_cert=/path/to/client.crt
   dns_regru_key=/path/to/client.key
   

   dns_regru_cert may also point to a single PEM file containing both the certificate and the private key (in which case dns_regru_key is optional).

   If you use reg.ru's service to manage external domains - no need to worry, plugin tries both plain domain and "servtype":"srv_dns_both"

3. Make sure the file is only readable by root! Otherwise all your domains might be in danger:

   sudo chmod 0600 /etc/letsencrypt/regru.ini
   

Usage

Request new certificates via a certbot invocation like this (adjust paths as needed):

Linux:

sudo certbot certonly \
   --authenticator dns-regru \
   --dns-regru-credentials /etc/letsencrypt/regru.ini \
   --dns-regru-propagation-seconds 180 \
   -d sub.domain.tld -d '*.wildcard.tld'

Windows (PowerShell):

certbot certonly \
   --authenticator dns-regru \
   --dns-regru-credentials C:\path\to\regru.ini \
   --dns-regru-propagation-seconds 180 \
   -d sub.domain.tld -d '*.wildcard.tld'

• Note that shell might try to resolve wildcard subdomain (*), you should put in in parentheses

Renewals will automatically be performed using the same authenticator and credentials by certbot.

See also certbot --help certbot-dns-regru for further information.

SWAG

To use this plugin with docker-swag you need to follow their guide

Add the following environment variables to your container:

DOCKER_MODS=linuxserver/mods:universal-package-install
INSTALL_PIP_PACKAGES=certbot-dns-regru

Then modify /config/dns-conf/regru.ini and provide credentials

Removal

   sudo pip uninstall certbot-dns-regru