Add documentation for DNSimple

2026-08-01 19:02:52 +02:00 · 2017-06-08 14:18:52 -07:00
parent 502ea82ac4
commit 0325ad9244
1 changed files with 76 additions and 1 deletions
@@ -1 +1,76 @@
-"""DNSimple DNS Authenticator"""
+"""
+The `~certbot_dns_dnsimple.dns_dnsimple` plugin automates the process of
+completing a ``dns-01`` challenge (`~acme.challenges.DNS01`) by creating, and
+subsequently removing, TXT records using the DNSimple API.
+
+
+Named Arguments
+---------------
+
+========================================  =====================================
+``--dns-dnsimple-credentials``            DNSimple credentials_ INI file.
+                                          (Required)
+``--dns-dnsimple-propagation-seconds``    The number of seconds to wait for DNS
+                                          to propagate before asking the ACME
+                                          server to verify the DNS record.
+                                          (Default: 30)
+========================================  =====================================
+
+Credentials
+-----------
+
+Use of this plugin requires a configuration file containing DNSimple API
+credentials, obtained from your DNSimple
+`account page <https://dnsimple.com/user>`_.
+
+.. code-block:: ini
+   :name: credentials.ini
+   :caption: Example credentials file:
+
+   # DNSimple API credentials used by Certbot
+   dns_dnsimple_token = MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw
+
+The path to this file can be provided interactively or using the
+``--dns-dnsimple-credentials`` command-line argument. Certbot records the path
+to this file for use during renewal, but does not store the file's contents.
+
+.. caution::
+   You should protect these API credentials as you would the password to your
+   DNSimple account. Users who can read this file can use these credentials
+   to issue arbitrary API calls on your behalf. Users who can cause Certbot to
+   run using these credentials can complete a ``dns-01`` challenge to acquire
+   new certificates or revoke existing certificates for associated domains,
+   even if those domains aren't being managed by this server.
+
+Examples
+--------
+
+.. code-block:: bash
+   :caption: To acquire a certificate for ``example.com``
+
+   certbot certonly \\
+     --dns-dnsimple \\
+     --dns-dnsimple-credentials ~/.secrets/certbot/dnsimple.ini \\
+     -d example.com
+
+.. code-block:: bash
+   :caption: To acquire a single certificate for both ``example.com`` and
+             ``www.example.com``
+
+   certbot certonly \\
+     --dns-dnsimple \\
+     --dns-dnsimple-credentials ~/.secrets/certbot/dnsimple.ini \\
+     -d example.com \\
+     -d www.example.com
+
+.. code-block:: bash
+   :caption: To acquire a certificate for ``example.com``, waiting 60 seconds
+             for DNS propagation
+
+   certbot certonly \\
+     --dns-dnsimple \\
+     --dns-dnsimple-credentials ~/.secrets/certbot/dnsimple.ini \\
+     --dns-dnsimple-propagation-seconds 60 \\
+     -d example.com
+
+"""