dch

dch / HAProxy ACME CloudFlare integration

Last active 8 hours ago

Like 0

See https://people.freebsd.org/~dch/posts/2026-10-08-haproxy-acme/ Modelled after https://github.com/haproxy/haproxy/blob/master/examples/lua/acme-gandi-livedns.lua

dch revised this gist 8 hours ago · 4ac75c1

1 file changed, 2 insertions, 3 deletions

acme-cloudflare.lua.j2 renamed to acme-cloudflare.lua
@@ -2,9 +2,9 @@
2 2 -- Requires HAProxy >= 3.5 (ACME_DEPLOY / ACME_NEWCERT lua events).
3 3 --
4 4 -- Supports CNAME delegation: if a domain maps to a delegated FQDN (e.g.
5 - -- _acme-challenge.skunkwerks.at CNAME <hash>.indieacme.org), TXT records
5 + -- _acme-challenge.example.net CNAME <key>.example.org), TXT records
6 6 -- are written to the delegated target instead. The API token then only
7 - -- needs Zone:DNS:Edit on indieacme.org, never on the primary zones.
7 + -- needs Zone:DNS:Edit on example.org, never on the primary zones.
8 8 --
9 9 -- HAProxy Configuration:
10 10 --
@@ -290,4 +290,3 @@ else
290 290 .. "answer challenges manually via 'acme challenge_ready' on the master CLI",
291 291 tostring(err)))
292 292 end
293 -

dch revised this gist 8 hours ago · 412ca0e

1 file changed, 293 insertions

acme-cloudflare.lua.j2 (file created)

Diff is too large to be shown