[GH-ISSUE #1093] Credential store (API) / Default credentials for DNS providers #904

Open
opened 2026-02-26 06:34:52 +03:00 by kerem · 4 comments
Owner

Originally created by @fabian-born on GitHub (May 11, 2021).
Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/1093

Are you in the right place?

  • If you are looking for support on how to get your upstream server forwarding, please consider asking the community on Reddit.
  • If you are writing code changes to contribute and need to ask about the internals of the software, Gitter is the best place to ask.
  • If you have a feature request for NPM then you are in the right place.

Is your feature request related to a problem? Please describe.
Every time when I add a new proxy host with a ssl certificate with DNS challenge I have to copy my API token from my password safe into the required field.

Describe the solution you'd like
A central place in the profile configuration where API token can be stored.

Originally created by @fabian-born on GitHub (May 11, 2021). Original GitHub issue: https://github.com/NginxProxyManager/nginx-proxy-manager/issues/1093 **Are you in the right place?** - If you are looking for support on how to get your upstream server forwarding, please consider asking the community on Reddit. - If you are writing code changes to contribute and need to ask about the internals of the software, Gitter is the best place to ask. - If you have a feature request for NPM then you are in the *right place.* **Is your feature request related to a problem? Please describe.** Every time when I add a new proxy host with a ssl certificate with DNS challenge I have to copy my API token from my password safe into the required field. **Describe the solution you'd like** A central place in the profile configuration where API token can be stored.
Author
Owner

@github-actions[bot] commented on GitHub (Mar 11, 2024):

Issue is now considered stale. If you want to keep it open, please comment 👍

<!-- gh-comment-id:1987487974 --> @github-actions[bot] commented on GitHub (Mar 11, 2024): Issue is now considered stale. If you want to keep it open, please comment :+1:
Author
Owner

@Ramalama2 commented on GitHub (Jul 8, 2024):

Im wondering about the same, its a little bit nervy.

Isnt there even a simple solution, like mounting any file, that i can replace with docker?
i mean in theory i can replace any file in the docker image with a readonly mounted file?

In the Docker image its inside:
/global/certbot-dns-plugins.json

Is it possible to add an override file, or an environtment variable that overrides in the json file the string you want, if the environment variable is defined?

<!-- gh-comment-id:2213602887 --> @Ramalama2 commented on GitHub (Jul 8, 2024): Im wondering about the same, its a little bit nervy. Isnt there even a simple solution, like mounting any file, that i can replace with docker? i mean in theory i can replace any file in the docker image with a readonly mounted file? In the Docker image its inside: /global/certbot-dns-plugins.json Is it possible to add an override file, or an environtment variable that overrides in the json file the string you want, if the environment variable is defined?
Author
Owner

@Ramalama2 commented on GitHub (Jul 8, 2024):

I found a way to replace the content in the file:

docker exec -it npm sh -c "jq '.ovh.credentials = \"dns_ovh_endpoint = ovh-eu\\ndns_ovh_application_key = mytestppkey\\ndns_ovh_application_secret = mytestsecret\\ndns_ovh_consumer_key = mytestkey\"' /app/global/certbot-dns-plugins.json > /app/global/temp.json && mv /app/global/temp.json /app/global/certbot-dns-plugins.json"

It works and replaces the credentials in the ovh section. But in the GUI i have still the standard mDadM... credentials.
like if the /global/certbot-dns-plugins.json doesnt have any effect. Even after restarting the image.

Does anyone know how to reread the /global/certbot-dns-plugins.json file? so that the changes of the file mirrors to the gui?

<!-- gh-comment-id:2213657397 --> @Ramalama2 commented on GitHub (Jul 8, 2024): I found a way to replace the content in the file: `docker exec -it npm sh -c "jq '.ovh.credentials = \"dns_ovh_endpoint = ovh-eu\\ndns_ovh_application_key = mytestppkey\\ndns_ovh_application_secret = mytestsecret\\ndns_ovh_consumer_key = mytestkey\"' /app/global/certbot-dns-plugins.json > /app/global/temp.json && mv /app/global/temp.json /app/global/certbot-dns-plugins.json"` It works and replaces the credentials in the ovh section. But in the GUI i have still the standard mDadM... credentials. like if the /global/certbot-dns-plugins.json doesnt have any effect. Even after restarting the image. Does anyone know how to reread the /global/certbot-dns-plugins.json file? so that the changes of the file mirrors to the gui?
Author
Owner

@github-actions[bot] commented on GitHub (Apr 23, 2025):

Issue is now considered stale. If you want to keep it open, please comment 👍

<!-- gh-comment-id:2822885135 --> @github-actions[bot] commented on GitHub (Apr 23, 2025): Issue is now considered stale. If you want to keep it open, please comment :+1:
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/nginx-proxy-manager-NginxProxyManager#904
No description provided.