[GH-ISSUE #4749] Please,add Dynv6 for npm‘s ssl .thx very much! #3002

Open
opened 2026-02-26 07:37:33 +03:00 by kerem · 2 comments
Owner

Originally created by @liuyie on GitHub (Aug 31, 2025).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/4749

Is your feature request related to a problem? Please describe.

Describe the solution you'd like

Describe alternatives you've considered

Additional context

Originally created by @liuyie on GitHub (Aug 31, 2025). Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/4749 <!-- Are you in the right place? - If you are looking for support on how to get your upstream server forwarding, please consider asking the community on Reddit. - If you are writing code changes to contribute and need to ask about the internals of the software, Gitter is the best place to ask. - If you think you found a bug with NPM (not Nginx, or your upstream server or MySql) then you are in the *right place.* --> **Is your feature request related to a problem? Please describe.** <!-- A clear and concise description of what the problem is. Ex. I'm always frustrated when [...] --> **Describe the solution you'd like** <!-- A clear and concise description of what you want to happen. --> **Describe alternatives you've considered** <!-- A clear and concise description of any alternative solutions or features you've considered. --> **Additional context** <!-- Add any other context or screenshots about the feature request here. -->
Author
Owner

@tianq02 commented on GitHub (Oct 27, 2025):

This is already supported. Please use the DNS RFC 2136 challenge for DynV6.

Steps:

  1. Generate a TSIG key for your zone at https://dynv6.com/keys/tsig/new.
  2. Follow the guide at https://certbot-dns-rfc2136.readthedocs.io/en/stable/
    Edit the credential file, taking care to enter an IP address for dns_rfc2136_server.
    In this case, use the output of the command dig +short ns1.dynv6.com, which should now be 95.216.144.82.
    The file should look something like this
# Target DNS server (IPv4 or IPv6 address, not a hostname)
# `dig +short ns1.dynv6.net` to get the IP
dns_rfc2136_server = 95.216.144.82
# Target DNS port
dns_rfc2136_port = 53
# TSIG key name (there is a trailing dot . )
dns_rfc2136_name = tsig-xxxxxx.dynv6.com.
# TSIG key secret (this is a dummy key, use your own)
dns_rfc2136_secret = 4q4wM/2I180UXoMyN4INVhJNi8V9BCV+jMw2mXgZw/CSuxUT8C7NKKFsAmKd7ak51vWKgSl12ib86oQRPkpDjg==
# TSIG key algorithm
dns_rfc2136_algorithm = HMAC-SHA512
# TSIG sign SOA query (optional, default: false)
dns_rfc2136_sign_query = false
  1. Voilà! You're good to go!

Dynv6 may say that the key is never used; this is a bug and you're all set.

<!-- gh-comment-id:3449181973 --> @tianq02 commented on GitHub (Oct 27, 2025): This is already supported. Please use the DNS RFC 2136 challenge for DynV6. Steps: 1. Generate a TSIG key for your zone at https://dynv6.com/keys/tsig/new. 2. Follow the guide at https://certbot-dns-rfc2136.readthedocs.io/en/stable/ Edit the credential file, taking care to enter an IP address for dns_rfc2136_server. In this case, use the output of the command dig +short ns1.dynv6.com, which should now be 95.216.144.82. The file should look something like this ```ini # Target DNS server (IPv4 or IPv6 address, not a hostname) # `dig +short ns1.dynv6.net` to get the IP dns_rfc2136_server = 95.216.144.82 # Target DNS port dns_rfc2136_port = 53 # TSIG key name (there is a trailing dot . ) dns_rfc2136_name = tsig-xxxxxx.dynv6.com. # TSIG key secret (this is a dummy key, use your own) dns_rfc2136_secret = 4q4wM/2I180UXoMyN4INVhJNi8V9BCV+jMw2mXgZw/CSuxUT8C7NKKFsAmKd7ak51vWKgSl12ib86oQRPkpDjg== # TSIG key algorithm dns_rfc2136_algorithm = HMAC-SHA512 # TSIG sign SOA query (optional, default: false) dns_rfc2136_sign_query = false ``` 3. Voilà! You're good to go! Dynv6 may say that the key is never used; this is a bug and you're all set.
Author
Owner

@CamelT0E commented on GitHub (Nov 6, 2025):

dns_rfc2136_name = tsig-xxxxxx.dynv6.com. This works with and without a dot at the end.

<!-- gh-comment-id:3496698076 --> @CamelT0E commented on GitHub (Nov 6, 2025): `dns_rfc2136_name = tsig-xxxxxx.dynv6.com. `This works with and without a dot at the end.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/nginx-proxy-manager-NginxProxyManager#3002
No description provided.