u/Fubbel80

DNS with Docker Container, Dynu and Let's Encrypt DNS-01 Challenge

Hi all,

new to Technitium DNS. First of all love the product and idea. Especially Clustering and Block lists. And comes as fully fledged DNS.
Read somewhere DHCP Clustering / Failover will also be added in the future. Would be amazing.

I setup Technitium on two seperate docker hosts with macvlan (local IP) and made a cluster. First I thought and hoped to get away with self signed certificates, but should have had a closer look at this (DoH specifications) first.
I then basically made Let's Encrypt Certificates with Dynu DNS-01 Challenge.

Which kind of sounds basic, and well actually it is, but took some time and some fiddling.
I made a script that (at least in theory, we will see in 3 months :D ) should update the Let's Encrypt certificate. The script adds the acme challenge TXT to Dynu (through API) and deletes it after again. Then converts the certificate into hostname.pfx

Since I didn't wanted to let this run on my Docker hosts, which basically would be possible, I made my own docker image based from the Technitium image. Adding certbot, curl and jq as packages.
Changed the entry point to run the renew process as a loop in background and start T DNS.

Certainly not battled tested yet, and some rough edges... :)

Anyway I wanted to ask if people are interested in a guide for one of the solutions I came up with?
Any advice or suggestions are welcome of course.

Maybe in the future we get a solution from Technitium providing certbot and a way to let it autorun in a docker container.

Cheers

reddit.com
u/Fubbel80 — 1 day ago