# Cloudflare: プロキシ機能、サーバセキュリティ、Certbot DNS-01チャレンジ、WARP Client

**URL:** <https://forum.ficusonline.com/t/topic/494>\
**Category:** Server\
**Tags:** cloudflare, security, dns, certbot\
**Created:** [2023 年 10 月 3 日午前 8:00 UTC](https://forum.ficusonline.com/t/topic/494 "2023-10-03T08:00:55Z")\
**Posts on this page:** 1\
**Showing post:** 4

<div class="post-metadata">

**Author:** ![tk-fuse](https://forum.ficusonline.com/user_avatar/forum.ficusonline.com/tk-fuse/32/255_2.png) [@tk-fuse](https://forum.ficusonline.com/u/tk-fuse)\
**Post date:** [2024 年 3 月 10 日午後 3:27 UTC](https://forum.ficusonline.com/t/topic/494/4 "2024-03-10T15:27:33Z")

</div>

## DNS-01チャレンジ

### Welcome to certbot-dns-cloudflare’s documentation!

> **[dns\_cloudflare - Welcome to certbot-dns-cloudflare’s documentation! —...](https://certbot-dns-cloudflare.readthedocs.io/en/stable/#welcome-to-certbot-dns-cloudflare-s-documentation)**
>
> The dns\_cloudflare plugin automates the process of completing a dns-01 challenge (DNS01) by creating, and subsequently removing, TXT records using the Cloudflare API.

CertbotをDockerコンテナとして起動し、DNS-01チャレンジによるドメインのTLS認証と証明書の取得を行います。CertbotのデフォルトDockerイメージには、CloudflareのDNS-01チャレンジのプラグインが含めれていないため、以下のイメージを利用します。

**Dockerイメージ**

> **[certbot/dns-cloudflare - Docker Image](https://hub.docker.com/r/certbot/dns-cloudflare)**

チャレンジに必要なファイルは、以下の **APIトークン** を含むINIファイルのみです。  
Cloudflareのユーザ管理画面からDNSゾーン限定のトAPIークンを作成し`cloudflare.ini`ファイルとして保存します。 **アクセス権は600** に設定して下さい。

 ![Screenshot from 2024-03-10 23-42-50](https://forum.ficusonline.com/uploads/default/original/2X/d/d4011fafdf53ac35219a6d07aae838649e6385b6.png)

`cloudflare.ini`

```auto
# Cloudflare API token used by Certbot
dns_cloudflare_api_token = 0123456789abcdef0123456789abcdef01234567

```

* * *

DockerコンテナとしてCertbotを起動します。起動時にコンテナ内に`cloudflare.ini`ファイルが存在する状態にしないと、 **ファイルが見つからないエラーが発生** します。

これを回避するため、 **`-v`オプション** で明示的に`cloudflare.ini`ファイルをコンテナ内にコピーするようにして下さい（コンテナのワーキングディレクトリは`/opt/certbot`）。

```auto
$ docker run -it --rm --name certbot_cloudflare -v "$PWD/letsencrypt:/etc/letsencrypt" -v "./cloudflare.ini:/opt/certbot/cloudflare.ini" certbot/dns-cloudflare:latest certonly --dns-cloudflare --dns-cloudflare-propagation-seconds 60 --dns-cloudflare-credentials ./cloudflare.ini -d example.com -d *.example.com

```

更新手続き

```auto
$ docker run -it --rm --name certbot_cloudflare -v "$PWD/letsencrypt:/etc/letsencrypt" -v "$PWD/cloudflare.ini:/opt/certbot/cloudflare.ini" certbot/dns-cloudflare:latest renew
Saving debug log to /var/log/letsencrypt/letsencrypt.log

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Processing /etc/letsencrypt/renewal/example.com.conf
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Certificate not yet due for renewal

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
The following certificates are not due for renewal yet:
  /etc/letsencrypt/live/example.com/fullchain.pem expires on 2024-06-09 (skipped)
No renewals were attempted.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

```

> **[Challenge Types](https://letsencrypt.org/docs/challenge-types/)**
>
> When you get a certificate from Let’s Encrypt, our servers validate that you control the domain names in that certificate using “challenges,” as defined by the ACME standard. Most of the time, this validation is handled automatically by your ACME...

### DNS-01 Challengeプロバイダーリスト

> **[DNS providers who easily integrate with Let's Encrypt DNS validation](https://community.letsencrypt.org/t/dns-providers-who-easily-integrate-with-lets-encrypt-dns-validation/86438)**
>
> In the spirit of Web Hosting who support Let's Encrypt and CDN Providers who support Let's Encrypt, I wanted to compile a list of DNS providers that feature a workflow (e.g. an API and existing ACME client integrations) that is a good fit for...

| DNS Hosting Provider | ACME Client Support | Cost |
| --- | --- | --- |
| [Akamai Edge DNS](https://www.akamai.com/us/en/products/security/edge-dns.jsp) | [Certbot](https://pypi.org/project/certbot-plugin-edgedns/), [lego](https://go-acme.github.io/lego/dns/), [Posh-ACME](https://github.com/rmbolger/Posh-ACME) , [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi) | Contract Specific |
| [Aliyun (CN)](https://cn.aliyun.com/) & [Alibaba Cloud DNS (EN)](https://www.alibabacloud.com/product/dns) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/), [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | Bundled with domain registration or [Cloud DNS pricing](https://www.alibabacloud.com/product/dns/pricing) |
| [Amazon Route53](https://aws.amazon.com/route53/) | [Certbot](https://certbot-dns-route53.readthedocs.io/en/latest/), [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [others](https://letsencrypt.org/docs/client-options/) | ~$0.50/mo per domain |
| [Azure DNS](https://azure.microsoft.com/en-us/services/dns/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/), [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | ~$0.50/mo per domain |
| [Cloudflare](https://www.cloudflare.com/) | [Certbot](https://certbot-dns-cloudflare.readthedocs.io/en/latest/), [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [others](https://letsencrypt.org/docs/client-options/) | Free [(except for Freenom domains)](https://community.cloudflare.com/t/unable-to-update-ddns-using-api-for-some-tlds/167228) |
| [ClouDNS](https://www.cloudns.net/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/), [Posh-ACME](https://github.com/rmbolger/Posh-ACME), [others](https://letsencrypt.org/docs/client-options/) | \>= $2.95/mo (with API-support) |
| [CloudXNS](https://www.cloudxns.net/) | [Certbot](https://certbot-dns-cloudxns.readthedocs.io/en/stable/), [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/) | Free, Chinese only |
| [deSEC](https://desec.io/) | [Certbot](https://github.com/desec-utils/certbot-hook), [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [others](https://letsencrypt.org/docs/client-options/) | Free |
| [DigitalOcean](https://www.digitalocean.com/) | [Certbot](https://certbot-dns-digitalocean.readthedocs.io/en/stable/), [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [others](https://letsencrypt.org/docs/client-options/) | Free |
| [DNS Made Easy](https://dnsmadeeasy.com/) | [Certbot](https://certbot-dns-dnsmadeeasy.readthedocs.io/en/stable/), [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [others](https://letsencrypt.org/docs/client-options/) | $59.95/yr (Business Membership gives API access) |
| [DNSimple](https://dnsimple.com/) | [Certbot](https://certbot-dns-dnsimple.readthedocs.io/en/stable/), [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [others](https://letsencrypt.org/docs/client-options/) | $5/mo |
| [DNSPod.com](https://dnspod.com/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/), [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | Free |
| [DuckDNS](https://www.duckdns.org/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/), [others](https://letsencrypt.org/docs/client-options/) | Free |
| [Dyn](https://dyn.com/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/), [others](https://letsencrypt.org/docs/client-options/) | $7/mo |
| [Dynu](https://dynu.com/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/), [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | Free |
| [EasyDNS](https://easydns.com/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/), [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | Bundled with domain registration (250k queries/month) or $20/yr for 1 MM queries/month |
| [FreeDNS/afraid.org](https://freedns.afraid.org/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [Posh-ACME](https://github.com/rmbolger/Posh-ACME) (no API, HTTP emulation) | Free (if you [share your domain with others](https://freedns.afraid.org/faq/#3)) |
| [Google Cloud DNS](https://cloud.google.com/dns/) | [Certbot](https://certbot-dns-google.readthedocs.io/en/stable/), [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [others](https://letsencrypt.org/docs/client-options/) | ~$0.20/mo |
| [Hetzner](https://www.hetzner.de/) | [lego](https://go-acme.github.io/lego/dns/), [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | Free |
| [Hurricane Electric](https://dns.he.net/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [Posh-ACME](https://github.com/rmbolger/Posh-ACME) (no API, HTTP emulation) | Free |
| [IBM Cloud DNS](https://www.ibm.com/cloud/dns) | [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | $275/mo per domain for Standard plan |
| [Luadns](https://www.luadns.com/) | [Certbot](https://certbot-dns-luadns.readthedocs.io/en/stable/), [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [others](https://letsencrypt.org/docs/client-options/) | Free |
| [MyDNS.jp](https://www.mydns.jp/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/) | Free |
| [NS1](https://ns1.com/) | [Certbot](https://certbot-dns-nsone.readthedocs.io/en/stable/), [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [others](https://letsencrypt.org/docs/client-options/) | ? (Free “developer” plan) |
| [Open Telekom Cloud](https://open-telekom-cloud.com/en/products-services/domain-name-service) | [lego](https://go-acme.github.io/lego/dns/) | 0,36 €/mo per zone |
| [OVH](https://ovh.com/) | [Certbot](https://certbot-dns-ovh.readthedocs.io/en/stable/), [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [others](https://letsencrypt.org/docs/client-options/) | Free |
| [PointHQ](https://pointhq.com/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | $25/mo per 10 domains |
| [Rackspace Cloud DNS](https://www.rackspace.com/cloud/dns) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/), [Posh-ACME](https://github.com/rmbolger/Posh-ACME), [others](https://letsencrypt.org/docs/client-options/) | Free |
| [Selectel](https://selectel.ru/en/services/additional/dns/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/), [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | Free |
| [Shellrent](https://shellrent.com/) | [Certbot](https://github.com/shellrent/certbot-dns-shellrent) | 1, €/y per zone |
| [StackPath](https://www.stackpath.com/services/managed-dns/) | [lego](https://go-acme.github.io/lego/dns/) | $10/mo |
| [Vultr](https://vultr.com/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi) (via Lexicon), [lego](https://go-acme.github.io/lego/dns/), [others](https://letsencrypt.org/docs/client-options/) | Free |
| [Yandex.Mail](https://yandex.com/support/domain/domain/dns.html) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/), [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | Free |
| [Zilore](https://zilore.com/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | $5/mo or higher for API access |
| [Zonomi](https://zonomi.com/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/), [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | Free |
| Domain Registrar: [Active24](https://www.active24.com/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi) | Bundled with domain registration |
| Domain Registrar: [alwaysdata](https://www.alwaysdata.com/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi) | Bundled with domain registration |
| Domain Registrar: [ConoHa](https://www.conoha.jp/en/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/) | Bundled with domain registration (Japanese) |
| Domain Registrar: [cyon.ch](https://www.cyon.ch/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi) | Bundled with domain registration |
| Domain Registrar: [do.de](https://www.do.de/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/), [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | Bundled with domain registration |
| Domain Registrar: [domeneshop](https://domene.shop/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | Bundled with domain registration.Note that domainname.shop (in English) is an alias of domene.shop (in Norwegian) |
| Domain Registrar: [DreamHost](https://dreamhost.com/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/), [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | ? (bundled with domain registration or hosting?) |
| Domain Registrar: [Euserv](https://euserv.com/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi) | Bundled with domain registration |
| Domain Registrar: [Exoscale](https://www.exoscale.com/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/) | Bundled with domain registration |
| Domain Registrar: [Futurehosting](https://www.futurehosting.com/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi) | Bundled with domain registration |
| Domain Registrar: [Gandi](https://gandi.net/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/), [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | Bundled with domain registration |
| Domain Registrar: [GoDaddy](https://godaddy.com/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/), [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | Bundled with domain registration, 10+ domains in account required to use |
| Domain Registrar: [GratisDNS.dk](https://gratisdns.dk/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi) | Bundled with domain registration (Danish) |
| Domain Registrar: [hosting.de](https://www.hosting.de/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/) | Bundled with domain registration (German) |
| Domain Registrar: [infomaniak.com](https://infomaniak.com/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/), [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | Bundled with domain registration (Swiss) |
| Domain Registrar: [internetx.com](https://internetx.com/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/), [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | Bundled with domain registration |
| Domain Registrar: [inwx.de](https://www.inwx.de/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/) | Bundled with domain registration |
| Domain Registrar: [Loopia.se](https://loopia.se/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | Bundled with domain registration (Swedish) |
| Domain Registrar: [name.com](https://name.com/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/), [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | Bundled with domain registration |
| Domain Registrar: [Namesilo](https://www.namesilo.com/) | [Certbot](https://github.com/joshp23/NameSilo_Certbot-DNS-01), [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/) | Bundled with domain registration |
| Domain Registrar: [Neodigit.net](https://www.neodigit.net/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi) | Bundled with domain registration (Spanish) |
| Domain Registrar: [netcup](https://www.netcup.eu/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/) | Bundled with domain registration |
| Domain Registrar: [Nexcess](https://www.nexcess.net/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi) | Bundled with domain registration |
| Domain Registrar: [Online.net](https://www.online.net/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi) | Bundled with domain registration |
| Domain Registrar: [reg.ru](https://reg.ru/) ([reg.com](http://reg.com/)) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/), [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | Bundled with domain registration (Russian) |
| Domain Registrar: [Servercow](https://servercow.de/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/) | Bundled with domain registration (German) |
| Domain Registrar: [TELE3](https://www.tele3.cz/system-acme-api.html) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi) | Bundled with domain registration (Czech) |
| Domain Registrar: [UnoEuro](https://en.unoeuro.com/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | Bundled with domain registration |
| Domain Registrar: [Zone.eu](https://www.zone.eu/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/) | Bundled with domain registration |
| Web Host: [KingHost](https://kinghost.com/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi) | Free (adult-only web host) |
| Web Host: [Linode](https://linode.com/) | [Certbot](https://certbot-dns-linode.readthedocs.io/en/stable/), [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [others](https://letsencrypt.org/docs/client-options/) | Bundled with hosting |
| Web Host: [Thermo.io](https://www.thermo.io/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi) | Variable hosting fee |
| Self-Hosted: [acme-dns](https://github.com/joohoi/acme-dns) | [Certbot](https://github.com/joohoi/acme-dns-certbot-joohoi), [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [others](https://letsencrypt.org/docs/client-options/) | Free, Open Source |
| Self-Hosted: [BlueCat](https://www.bluecatnetworks.com/adaptive-dns/ddi/) | [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | Enterprise DDI (Contract Specific) |
| Self-Hosted: [cPanel](https://cpanel.net/) | [Certbot](https://github.com/letsdebug/certbot-cpanel-dns-auth-hook), [lego](https://go-acme.github.io/lego/dns/) | $20/mo licence or variable cost for shared cPanel hosting |
| Self-Hosted: [DirectAdmin](https://directadmin.com/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi) | Free |
| Self-Hosted: [Infoblox](https://www.infoblox.com/products/ddi/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | Enterprise DDI (Contract Specific) |
| Self-Hosted: [ISPConfig](https://ispconfig.org/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi) | Free |
| Self-Hosted: [Knot (knsupdate)](https://www.knot-dns.cz/documentation/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi) | Free, Open Source |
| Self-Hosted: [PowerDNS](https://powerdns.com/) | [acme.sh](https://github.com/Neilpang/acme.sh/tree/master/dnsapi), [lego](https://go-acme.github.io/lego/dns/) | Free, Open Source |
| Self-Hosted: [Simple DNS Plus](https://simpledns.plus/) | [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | $79 for 5 zone license |
| Self-Hosted: [Windows DNS](https://www.microsoft.com/en-us/windows-server) | [Posh-ACME](https://github.com/rmbolger/Posh-ACME) | Free with Windows Server OS license |

**Wiki instructions:**

---

_[View the full topic](https://forum.ficusonline.com/t/topic/494)._