This is a microservice to bridge between ACME requests to Step CA and PowerDNS.
PDNS_API_URLPDNS_API_KEYACME_SERVER_URLEMAIL_ADDRESS
DNS_SERVERS- A list of DNS servers to query for a response, separated by a semi-colon. Also setDNS_SERVER_ONEandDNS_SERVER_TWO
# With Podman
podman run --rm -d --name lego-bridge \
-p 8080:8080 \
-e PDNS_API_URL="https://pdns-api.example.com:8081" \
-e PDNS_API_KEY="somekeyhere" \
-e ACME_SERVER_URL="https://step-ca.example.com/acme/acme/directory" \
-e EMAIL_ADDRESS="[email protected]" \
-e DNS_SERVERS="192.168.42.9,192.168.42.10" \
-e DNS_SERVER_ONE="192.168.42.9" \
-e DNS_SERVER_TWO="192.168.42.10" \
quay.io/kenmoini/lego-bridge:latest
# On Kubernetes - Secret edits needed
kubectl apply -k deployment/Now you should be able to make a cURL to the service:
export SERVER_ENDPOINT="https://lego-bridge.apps.k8s.kemo.labs"
./request-cert.sh "test.example.com"
./request-cert.sh "test.example.com;other-test.example.com"
# Or pipe things into Bash
curl -sSL https://raw.githubusercontent.com/kenmoini/lego-bridge/main/request-cert.sh | SERVER_ENDPOINT="https://lego-bridge.apps.k8s.kemo.labs" bash -s -- "testing.example.com;test2.example.com"
Which will save the certificate to ./$FIRST_DOMAIN.crt.pem and the key to ./$FIRST_DOMAIN.key.pem
dnf install -y jq curl wget
cd /opt
wget https://raw.githubusercontent.com/kenmoini/lego-bridge/main/cron-wrapper.sh -O cockpit-ssl.sh
chmod a+x cockpit-ssl.sh
crontab -e
# 0 0 3 * * /opt/cockpit-ssl.sh "host.example.com"Defaults are set to work for Cockpit