Multiple caddy instances and acme certs

[timelordx]

@tcurdt

Yeah, I am just really not keen on handing out write access to the DNS records to a server.
It would amplify the consequences in case of a security breach.

Yeah, I use ACME-DNS specifically for that purpose. My DNS delegates _acme-challenge.MYDOMAIN to ACME-DNS instance, and Caddy can update only that. No write access to MYDOMAIN.

More info here:

NameCheap with ACME-DNS Provider

If you’re using NameCheap for your DNS, you probably know already that NameCheap API is quite generous when it comes to access permissions. Generous not in a good way. With Namecheap API you can: Sell domains, SSL certificates etc., on your website, at any price you choose Integrate domain registrations with billing applications such as Modernbill and Ubersmith Create applications to monitor domains and send alerts Build custom applications to manage your domains And more which is way more t…