Post #2390668

@vollink@wandering.shop You add an NS record to your main domain, eg: acme-dns NS vollink.ddns.com What you end up with would be something like (these are all fixed, unchanging, things in your DNS despite the odd names): acme-dns NS vollink.ddns.com www CNAME vollink.ddns.com _acme-challenge CNAME .acme-dns.vollink.com. And that means when LE looks up _acme-challenge.vollink.com it'll be redirected to .acme-dns.vollink.com. which it will look up using your ACME DNS server on your own port 53. The thing you'll get from the client. The other nice part about this is you can use it (and the examples above assume you will) to get a wildcard domain cert rather than one for each host, which can be a whole lot easier when setting up Apache/nginx and just means you only need to renew one certificate, and don't need to do anything on the LE end if you add another subdomain.