{"id":44330448,"url":"https://github.com/stackitcloud/certbot-dns-stackit","last_synced_at":"2026-02-11T10:01:26.083Z","repository":{"id":194646584,"uuid":"690480295","full_name":"stackitcloud/certbot-dns-stackit","owner":"stackitcloud","description":"The Certbot DNS-Stackit Authenticator Plugin is an advanced utility designed to streamline the acquisition of SSL/TLS certificates from Let's Encrypt with Certbot. This plugin facilitates automated certificate issuance and rejuvenation by employing the DNS-01 challenge protocol.","archived":false,"fork":false,"pushed_at":"2026-02-02T17:52:49.000Z","size":103,"stargazers_count":3,"open_issues_count":2,"forks_count":1,"subscribers_count":3,"default_branch":"main","last_synced_at":"2026-02-03T07:25:55.900Z","etag":null,"topics":["automation","certbot-plugin","cloud-services","devops","dns-01-challenge","lets-encrypt","python","security","ssl-certificates","stackit"],"latest_commit_sha":null,"homepage":"https://www.stackit.de","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/stackitcloud.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2023-09-12T09:23:51.000Z","updated_at":"2026-01-07T13:58:19.000Z","dependencies_parsed_at":"2023-10-12T23:33:12.035Z","dependency_job_id":"d513eeaf-f5a2-49ca-9d7d-f8095fdcbe9e","html_url":"https://github.com/stackitcloud/certbot-dns-stackit","commit_stats":null,"previous_names":["stackitcloud/certbot-dns-stackit"],"tags_count":4,"template":false,"template_full_name":null,"purl":"pkg:github/stackitcloud/certbot-dns-stackit","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stackitcloud%2Fcertbot-dns-stackit","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stackitcloud%2Fcertbot-dns-stackit/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stackitcloud%2Fcertbot-dns-stackit/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stackitcloud%2Fcertbot-dns-stackit/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/stackitcloud","download_url":"https://codeload.github.com/stackitcloud/certbot-dns-stackit/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/stackitcloud%2Fcertbot-dns-stackit/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29331589,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-11T06:13:03.264Z","status":"ssl_error","status_checked_at":"2026-02-11T06:12:55.843Z","response_time":97,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["automation","certbot-plugin","cloud-services","devops","dns-01-challenge","lets-encrypt","python","security","ssl-certificates","stackit"],"created_at":"2026-02-11T10:00:45.335Z","updated_at":"2026-02-11T10:01:26.041Z","avatar_url":"https://github.com/stackitcloud.png","language":"Python","readme":"# Certbot DNS-STACKIT Authenticator Plugin\n\n[![License](https://img.shields.io/badge/License-Apache2.0-blue.svg)](https://github.com/stackitcloud/certbot-dns-stackit/blob/main/LICENSE)\n[![GitHub Release](https://img.shields.io/github/v/release/stackitcloud/certbot-dns-stackit.svg)](https://github.com/stackitcloud/certbot-dns-stackit/releases)\n[![Python Version](https://img.shields.io/badge/Python-%3E=3.7-blue.svg)](https://www.python.org/downloads/)\n[![Downloads](https://img.shields.io/pypi/dm/certbot-dns-stackit.svg)](https://pypi.org/project/certbot-dns-stackit/)\n[![Code Size](https://img.shields.io/github/languages/code-size/stackitcloud/certbot-dns-stackit.svg)](https://github.com/stackitcloud/certbot-dns-stackit)\n[![Contributors](https://img.shields.io/github/contributors/stackitcloud/certbot-dns-stackit.svg)](https://github.com/stackitcloud/certbot-dns-stackit/graphs/contributors)\n\nThe Certbot DNS-STACKIT Authenticator Plugin facilitates the procurement of SSL/TLS certificates from Let's Encrypt\nutilizing the DNS-01 challenge methodology in conjunction with STACKIT as the designated DNS service provider. This\ndocument elucidates the procedural steps for the installation and operational utilization of this plugin.\n\n## Installation\n\nTo initialize the Certbot DNS-STACKIT Authenticator Plugin, deploy the following pip command:\n\n```bash\npip install certbot-dns-stackit\n```\n\n## Usage\n\nUpon successful integration of the plugin, it becomes viable to employ it with Certbot for the retrieval of SSL/TLS\ncertificates. The subsequent section delineates the pertinent arguments and their respective examples:\n\n### Arguments\n\n| Argument                            | Example Value     | Description                                                                                                                                                                     |\n|-------------------------------------|-------------------|---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|\n| `--authenticator`                   | dns-stackit                            | Engages the STACKIT authenticator mechanism. This must be configured as dns-stackit. (Mandatory)                                            | \n| `--dns-stackit-project-id`          | '8a4c68b1-586a-4534-aa0c-9f8c12334a76' | Sets the STACKIT project id if the service account authentication is used. (Recommended)|\n| `--dns-stackit-service-account`     | ./service-account.pem                  | Denotes the directory path to the STACKIT service account file. (Recommended)                                   |\n| `--dns-stackit-credentials`         | ./credentials.ini                      | Denotes the directory path to the credentials file for STACKIT DNS. This document must encapsulate the dns_stackit_auth_token and dns_stackit_project_id variables.     |\n| `--dns-stackit-propagation-seconds` | 900                                    | Configures the delay prior to initiating the DNS record query. A 900-second interval (equivalent to 15 minutes) is recommended. (Default: 900)                                  |\nEither the --dns-stackit-credentials flag or the --dns-stackit-service-account and --dns-stackit-project-id flags are mandatory.\n\n### Example\n\nBelow is a structured example detailing the application of Certbot in conjunction with the DNS-STACKIT\nAuthenticator Plugin to retrieve a certificate:\n\n```bash\ncertbot certonly \\\n  --authenticator dns-stackit \\\n  --dns-stackit-credentials ./credentials.ini \\\n  --dns-stackit-propagation-seconds 900 \\\n  --server https://acme-v02.api.letsencrypt.org/directory \\\n  --agree-tos \\\n  --rsa-key-size 4096 \\\n  -d 'example.runs.onstackit.cloud' \\\n  -d '*.example.runs.onstackit.cloud'\n```\n\nFor this example, example.runs.onstackit.cloud represents the designated domain (zone) for certificate procurement.\n\n### Example of credentials.ini\n\nTo operationalize the plugin, it's imperative to curate a credentials.ini file encompassing your STACKIT DNS\ncredentials:\n\n```ini\ndns_stackit_auth_token = \"your_token_here\"\ndns_stackit_project_id = \"your_project_id_here\"\n```\n\nIt's crucial to replace \"your_token_here\" and \"your_project_id_here\" placeholders with the genuine STACKIT\nauthentication token and project ID. The token's associated service account necessitates project membership privileges\nfor record set creation.\n\n### Authentication via STACKIT service account\n\nThe service account allows the user to use a long lived authentication which generates short lived tokens. To setup a service account refer to the [service account documentation](https://docs.stackit.cloud/stackit/en/create-a-service-account-134415839.html).\nIt's important to also set the --dns-stackit-project-id flag to the corresponding STACKIT project when using a service account.\n\n## Test Procedures\n\n- Unit Testing:\n    ```bash\n    make test\n    ```\n\n- Linting:\n    ```bash\n    make lint\n    ```\n\n## Contribute\nSee [CONTRIBUTING.md](https://github.com/stackitcloud/certbot-dns-stackit/blob/main/CONTRIBUTING.md)\n\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fstackitcloud%2Fcertbot-dns-stackit","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fstackitcloud%2Fcertbot-dns-stackit","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fstackitcloud%2Fcertbot-dns-stackit/lists"}