From 0325ad9244835fac724126f918b049a145f6cdb7 Mon Sep 17 00:00:00 2001
From: Zach Shepherd <shepherdz@vmware.com>
Date: Thu, 8 Jun 2017 14:18:52 -0700
Subject: [PATCH] Add documentation for DNSimple

---
 .../certbot_dns_dnsimple/__init__.py          | 77 ++++++++++++++++++-
 1 file changed, 76 insertions(+), 1 deletion(-)

diff --git a/certbot-dns-dnsimple/certbot_dns_dnsimple/__init__.py b/certbot-dns-dnsimple/certbot_dns_dnsimple/__init__.py
index 1d6747249..1f5a6cbe4 100644
--- a/certbot-dns-dnsimple/certbot_dns_dnsimple/__init__.py
+++ b/certbot-dns-dnsimple/certbot_dns_dnsimple/__init__.py
@@ -1 +1,76 @@
-"""DNSimple DNS Authenticator"""
+"""
+The `~certbot_dns_dnsimple.dns_dnsimple` plugin automates the process of
+completing a ``dns-01`` challenge (`~acme.challenges.DNS01`) by creating, and
+subsequently removing, TXT records using the DNSimple API.
+
+
+Named Arguments
+---------------
+
+========================================  =====================================
+``--dns-dnsimple-credentials``            DNSimple credentials_ INI file.
+                                          (Required)
+``--dns-dnsimple-propagation-seconds``    The number of seconds to wait for DNS
+                                          to propagate before asking the ACME
+                                          server to verify the DNS record.
+                                          (Default: 30)
+========================================  =====================================
+
+Credentials
+-----------
+
+Use of this plugin requires a configuration file containing DNSimple API
+credentials, obtained from your DNSimple
+`account page <https://dnsimple.com/user>`_.
+
+.. code-block:: ini
+   :name: credentials.ini
+   :caption: Example credentials file:
+
+   # DNSimple API credentials used by Certbot
+   dns_dnsimple_token = MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw
+
+The path to this file can be provided interactively or using the
+``--dns-dnsimple-credentials`` command-line argument. Certbot records the path
+to this file for use during renewal, but does not store the file's contents.
+
+.. caution::
+   You should protect these API credentials as you would the password to your
+   DNSimple account. Users who can read this file can use these credentials
+   to issue arbitrary API calls on your behalf. Users who can cause Certbot to
+   run using these credentials can complete a ``dns-01`` challenge to acquire
+   new certificates or revoke existing certificates for associated domains,
+   even if those domains aren't being managed by this server.
+
+Examples
+--------
+
+.. code-block:: bash
+   :caption: To acquire a certificate for ``example.com``
+
+   certbot certonly \\
+     --dns-dnsimple \\
+     --dns-dnsimple-credentials ~/.secrets/certbot/dnsimple.ini \\
+     -d example.com
+
+.. code-block:: bash
+   :caption: To acquire a single certificate for both ``example.com`` and
+             ``www.example.com``
+
+   certbot certonly \\
+     --dns-dnsimple \\
+     --dns-dnsimple-credentials ~/.secrets/certbot/dnsimple.ini \\
+     -d example.com \\
+     -d www.example.com
+
+.. code-block:: bash
+   :caption: To acquire a certificate for ``example.com``, waiting 60 seconds
+             for DNS propagation
+
+   certbot certonly \\
+     --dns-dnsimple \\
+     --dns-dnsimple-credentials ~/.secrets/certbot/dnsimple.ini \\
+     --dns-dnsimple-propagation-seconds 60 \\
+     -d example.com
+
+"""