Certbot with dns-cloudflare

安裝套件

sudo apt install certbot letsencrypt python3-certbot-dns-cloudflare

建立 Token

cloudflare 管理帳戶 > 帳戶 API 權杖

點選 建立 Token

API 權杖範本 選擇 編輯區域 DNS 使用範本

設定區域(域名)

建立證書

~/.secrets/certbot/cloudflare.ini

dns_cloudflare_api_token = xxxx

設定權限

sudo chmod 600 ~/.secrets/certbot/cloudflare.ini

產生憑證

certbot certonly \
  --dns-cloudflare \
  --dns-cloudflare-credentials ~/.secrets/certbot/cloudflare.ini \
  -d staging.abc.today

Successfully received certificate. Certificate is saved at: /etc/letsencrypt/live/staging.abc.today/fullchain.pem Key is saved at: /etc/letsencrypt/live/staging.abc.today/privkey.pem

https://certbot-dns-cloudflare.readthedocs.io/en/stable/