Azure-README.txt

Using Azure for LetsEncrypt domain verification

Guide for using Azure for LetsEncrypt domain verification.

Prerequisites:
- Azure CLI tools installed - see https://docs.microsoft.com/en-us/cli/azure/install-azure-cli
- Logged in with azure-cli - i.e. azure login

Ensure dns_add_azure and dns_del_azure scripts are called when the DNS is validated by modifying the .getssl.cfg:

VALIDATE_VIA_DNS=true
DNS_ADD_COMMAND=dns_scripts/dns_add_azure # n.b use valid path
DNS_DEL_COMMAND=dns_scripts/dns_del_azure

The dns_add_azure and dns_del_azure scripts assume that the following environment variables are added to the configuration file:

- AZURE_RESOURCE_GROUP - the name of the resource group that contains the DNS zone 
- AZURE_ZONE_ID - a comma-separated list of valid DNS zones. this allows the same certificate to be used across multiple top-level domains
- AZURE_SUBSCRIPTION_ID - the name or ID of the subscription that AZURE_RESOURCE_GROUP is part of

Each of these variables can be included in the .getssl.cfg, e.g:

export AZURE_RESOURCE_GROUP=my-resource-group
export AZURE_ZONE_ID=example.com,anotherdomain.com
export AZURE_SUBSCRIPTION_ID=my-azure-subscriptin