Feature: add multi-provider/multi-account mode#13
Conversation
|
Thanks for the PR! Great work keeping it fully backwards compatible. I debated merging this due to the additional complexity, why not use multiple instances? Then I actually tried running multiple acmeproxy.pl instances outside of docker.. oof. That won't be fixed anytime soon, so this is actually a pretty good feature to have. This is becoming kitchen-sink ware.. Argh. |
|
Thanks for the review and merge! Another argument in favor of implementing this as a feature rather than using multiple instances, which I didn't mention in the PR description, is that it allows issuing multi-domain (SAN) certificates even when the domains are And another benefit is that it simplifies domain management on clients. With multiple |
Hello,
This PR adds support for multiple DNS providers and/or accounts in
acmeproxy.pl.While it is common for domains managed by a single entity (organization or individual) to be hosted with the same DNS provider, there are also cases where domains are spread across multiple provider accounts or even different DNS providers. This change allows such setups to be handled by a single
acmeproxy.plinstance.A new optional configuration section can be used to define multiple DNS accounts. Each entry specifies the DNS plugin, the environment variables containing credentials and settings, and a list of domains associated with that account. When processing a client request,
acmeproxy.plselects the appropriate account by matching either the full domain name or a top-level domain suffix.This allows a single
acmeproxy.plinstance to serve certificate requests for domains hosted across multiple DNS providers and/or accounts while maintaining backward compatibility with the original single-account configuration.