dehydrated-mythic-dns01

These are hook scripts for the dehydrated client for verifying Let's Encrypt SSL certificates using DNS validation with the Mythic Beasts DNS API.

Note that this hook uses the newer DNS API v2.

A step-by-step guide to using this script can be found on the Mythic Beasts website.

The script was originally written by David Earl.

Usage

To use these scripts you will need to create credentials for your domains using the Mythic Beasts control panel

The credentials only need to be able to add and remove TXT records at _acme-challenge under your domain (e.g. _acme-challenge.example.com)

Then create the file /etc/dehydrated/dnsapi.config.txt containing your domain client ID and secret. You can add multiple domains, one per line:

example.net clientId clientSecret
example.com otherClientId otherClientSecret

To tell dehydrated to use the hook script, provide its path via the -k option. You will also need -t dns-01 to use DNS-01 validation:

dehydrated -c -t dns-01 -k .../path/to/dehydrated-mythic-dns01.sh

Or you can set the HOOK and CHALLENGETYPE configuration variables, by creating the file /etc/dehydrated/conf.d/hook.sh with this content:

HOOK=.../path/to/dehydrated-mythic-dns01.sh
CHALLENGETYPE=dns-01

If you need to combine this hook with others, take a look at dehydrated-code-rack. Link to the scripts something like this:

for d in common clean-challenge deploy-challenge; do
    mkdir -p /etc/dehydrated/hooks/$d
    ln -s $d/mythic-dns01 /etc/dehydrated/hooks/$d
done