Hacker News new | ask | show | jobs
by 5d41402abc4b 523 days ago
If your server is not accessible from the internet you need to use DNS based authentication for which you need to have a DNS API key lying around on your server which is a significant risk.
1 comments
erincandescent 522 days ago
Put the ACME challenges in their own DNS zones. Grant the key permission to only that zone. Risk mitigated.
link
crtasm 522 days ago
Is this possible on Porkbun?
link