This is a little DNS server inspired by nip.io and sslip.io that resolves any prefix-ww.xx.yy.zz-suffix.dns.example.com
to the ww.xx.yy.zz ipv4 address. In addition, it requests a *.dns.example.com
wildcard certificate and
makes it available from https://key.example.com/?token=secret
.
The only requirement is to create a DNS A record for dns
pointing to this server along with a NS record DNS
pointing to dns.example.com
.
It caches certs, accounts and keys under ./cache
.
npm install
sudo setcap 'cap_net_bind_service=+ep' `which node`
[email protected] BASE_DOMAIN=dns.example.com npm start
PRODUCTION_LE=true [email protected] BASE_DOMAIN=dns.example.com npm start
The following environnement variable are available
BASE_DOMAIN : (required) Your domain with associated A and NS records.
DNS_EMAIL : (required) Your email for Let's Encrypt cert requests.
EXTERNAL_IP : (optional) External IP, the one associated with the A record. Will pick the first external IPv4 is omitted.
TOKEN : (optional) Secret to "protect" the key, defaults to "secret".
PRODUCTION_LE : (optional) Wether to use staging or production LE endpoints, defaults to staging.