2022-04-19 13:38:56 -07:00
|
|
|
|
[general]
|
|
|
|
|
|
# DNS interface. Note that systemd-resolved may reserve port 53 on 127.0.0.53
|
|
|
|
|
|
# In this case acme-dns will error out and you will need to define the listening interface
|
|
|
|
|
|
# for example: listen = "127.0.0.1:53"
|
|
|
|
|
|
listen = "0.0.0.0:53"
|
|
|
|
|
|
# protocol, "both", "both4", "both6", "udp", "udp4", "udp6" or "tcp", "tcp4", "tcp6"
|
2022-12-03 17:32:20 -08:00
|
|
|
|
protocol = "both"
|
2022-04-19 13:38:56 -07:00
|
|
|
|
# domain name to serve the requests off of
|
|
|
|
|
|
domain = "dns-auth.ahlawat.com"
|
|
|
|
|
|
# zone name server
|
|
|
|
|
|
nsname = "dns-auth.ahlawat.com"
|
|
|
|
|
|
# admin email address, where @ is substituted with .
|
|
|
|
|
|
nsadmin = "sharad.ahlawat.com"
|
|
|
|
|
|
# predefined records served in addition to the TXT
|
|
|
|
|
|
records = [
|
|
|
|
|
|
# domain pointing to the public IP of your acme-dns server
|
|
|
|
|
|
"dns-auth.ahlawat.com. A 216.139.40.20",
|
|
|
|
|
|
# specify that auth.example.org will resolve any *.auth.example.org records
|
|
|
|
|
|
"dns-auth.ahlawat.com. NS dns-auth.ahlawat.com.",
|
|
|
|
|
|
]
|
|
|
|
|
|
# debug messages from CORS etc
|
|
|
|
|
|
debug = false
|
|
|
|
|
|
|
|
|
|
|
|
[database]
|
|
|
|
|
|
# Database engine to use, sqlite3 or postgres
|
|
|
|
|
|
engine = "sqlite3"
|
|
|
|
|
|
# Connection string, filename for sqlite3 and postgres://$username:$password@$host/$db_name for postgres
|
|
|
|
|
|
# Please note that the default Docker image uses path /var/lib/acme-dns/acme-dns.db for sqlite3
|
|
|
|
|
|
connection = "/usr/local/lib/acme-dns/acme-dns.db"
|
|
|
|
|
|
# connection = "postgres://user:password@localhost/acmedns_db"
|
|
|
|
|
|
|
|
|
|
|
|
[api]
|
|
|
|
|
|
# listen ip eg. 127.0.0.1
|
|
|
|
|
|
ip = "0.0.0.0"
|
|
|
|
|
|
# disable registration endpoint
|
|
|
|
|
|
disable_registration = false
|
|
|
|
|
|
# listen port, eg. 443 for default HTTPS
|
|
|
|
|
|
port = "443"
|
|
|
|
|
|
# possible values: "letsencrypt", "letsencryptstaging", "cert", "none"
|
|
|
|
|
|
tls = "cert"
|
|
|
|
|
|
# only used if tls = "cert"
|
|
|
|
|
|
tls_cert_privkey = "/mnt/certs/privkey.pem"
|
|
|
|
|
|
tls_cert_fullchain = "/mnt/certs/fullchain.pem"
|
|
|
|
|
|
# only used if tls = "letsencrypt"
|
|
|
|
|
|
acme_cache_dir = "api-certs"
|
|
|
|
|
|
# optional e-mail address to which Let's Encrypt will send expiration notices for the API's cert
|
2022-12-03 17:32:20 -08:00
|
|
|
|
notification_email = "sharad.ahlawat.com"
|
2022-04-19 13:38:56 -07:00
|
|
|
|
# CORS AllowOrigins, wildcards can be used
|
|
|
|
|
|
corsorigins = [
|
|
|
|
|
|
"*"
|
|
|
|
|
|
]
|
|
|
|
|
|
# use HTTP header to get the client ip
|
|
|
|
|
|
use_header = false
|
|
|
|
|
|
# header name to pull the ip address / list of ip addresses from
|
|
|
|
|
|
header_name = "X-Forwarded-For"
|
|
|
|
|
|
|
|
|
|
|
|
[logconfig]
|
|
|
|
|
|
# logging level: "error", "warning", "info" or "debug"
|
2022-12-03 17:32:20 -08:00
|
|
|
|
loglevel = "error"
|
2022-04-19 13:38:56 -07:00
|
|
|
|
# possible values: stdout, TODO file & integrations
|
|
|
|
|
|
logtype = "stdout"
|
|
|
|
|
|
# file path for logfile TODO
|
|
|
|
|
|
# logfile = "./acme-dns.log"
|
|
|
|
|
|
# format, either "json" or "text"
|
|
|
|
|
|
logformat = "text"
|
