[GH-ISSUE #231] Reduce the items required to create the Cloudflare DNS credentials #4552

Closed
opened 2026-03-01 15:34:12 +03:00 by kerem · 10 comments
Owner

Originally created by @leic4u on GitHub (Dec 10, 2023).
Original GitHub issue: https://github.com/0xJacky/nginx-ui/issues/231

According to acme.sh wiki, users could use Cloudflare DNS api by using restrictive API token OR using global API key.

when I use the restrictive API, I just need to provide the CF_Token and CF_Account_Id to acme.sh.
OR when I use the global API, I just need to provide the CF_Key and CF_Email to acme.sh.

And nginx-ui requires too much items to be must filled now.

image

Please considering reduce the items of Cloudflare DNS credentials.

Originally created by @leic4u on GitHub (Dec 10, 2023). Original GitHub issue: https://github.com/0xJacky/nginx-ui/issues/231 According to [acme.sh wiki](https://github.com/acmesh-official/acme.sh/wiki/dnsapi#dns_cf), users could use Cloudflare DNS api by using restrictive API token OR using global API key. when I use the restrictive API, I just need to provide the `CF_Token` and `CF_Account_Id` to acme.sh. OR when I use the global API, I just need to provide the `CF_Key` and `CF_Email` to acme.sh. And nginx-ui requires too much items to be must filled now. ![image](https://github.com/0xJacky/nginx-ui/assets/32786903/e97506d5-50eb-450d-9ec9-8b46fd880bf1) Please considering reduce the items of Cloudflare DNS credentials.
kerem 2026-03-01 15:34:12 +03:00
Author
Owner

@0xJacky commented on GitHub (Dec 11, 2023):

These items are downloaded from https://github.com/go-acme/lego/tree/master/providers/dns, the only thing I can do is to remove all the vaildate rules.

<!-- gh-comment-id:1849176137 --> @0xJacky commented on GitHub (Dec 11, 2023): These items are downloaded from https://github.com/go-acme/lego/tree/master/providers/dns, the only thing I can do is to remove all the vaildate rules.
Author
Owner

@leic4u commented on GitHub (Dec 11, 2023):

These items are downloaded from https://github.com/go-acme/lego/tree/master/providers/dns, the only thing I can do is to remove all the vaildate rules.

啊?我一直以为本项目是用的 acme.sh,原来不是吗😂

根据 go-acme/lego 项目的 wiki 介绍,也不是都必填,我理解也是可以取消必填的。
You may use CF_API_EMAIL and CF_API_KEY to authenticate, or CF_DNS_API_TOKEN, or CF_DNS_API_TOKEN and CF_ZONE_API_TOKEN.

建议在 DNS 凭证页面上,把这个项目的 wiki 地址放一下,不然可能会有点懵,不知道怎么填。我一直对照着 acme.sh 的 wiki 在看😂

<!-- gh-comment-id:1850017394 --> @leic4u commented on GitHub (Dec 11, 2023): > These items are downloaded from https://github.com/go-acme/lego/tree/master/providers/dns, the only thing I can do is to remove all the vaildate rules. 啊?我一直以为本项目是用的 acme.sh,原来不是吗😂 根据 go-acme/lego 项目的 [wiki 介绍](https://go-acme.github.io/lego/dns/cloudflare/#description),也不是都必填,我理解也是可以取消必填的。 You may use `CF_API_EMAIL` and `CF_API_KEY` to authenticate, or `CF_DNS_API_TOKEN`, or `CF_DNS_API_TOKEN` and `CF_ZONE_API_TOKEN`. 建议在 DNS 凭证页面上,把这个项目的 wiki 地址放一下,不然可能会有点懵,不知道怎么填。我一直对照着 acme.sh 的 wiki 在看😂
Author
Owner

@0xJacky commented on GitHub (Dec 11, 2023):

应该参考这个 https://go-acme.github.io/lego/dns/

<!-- gh-comment-id:1850020419 --> @0xJacky commented on GitHub (Dec 11, 2023): 应该参考这个 https://go-acme.github.io/lego/dns/
Author
Owner

@0xJacky commented on GitHub (Dec 11, 2023):

但是校验器确实应该去掉

<!-- gh-comment-id:1850021235 --> @0xJacky commented on GitHub (Dec 11, 2023): 但是校验器确实应该去掉
Author
Owner

@leic4u commented on GitHub (Dec 11, 2023):

应该参考这个 https://go-acme.github.io/lego/dns/

是的,我也是看的这个,从项目主页 readme 跳过去的。

但是校验器确实应该去掉

那其他 DNS Provider 是不是也有这个问题,我没一个一个去看,要不全部去掉算了。

顺便问下,当初集成 acme 的时候,为啥选择集成 go-acme 项目,没选择 acme.sh 项目呢,我感觉 acme,sh 的功能挺强大的。

<!-- gh-comment-id:1850032523 --> @leic4u commented on GitHub (Dec 11, 2023): > 应该参考这个 https://go-acme.github.io/lego/dns/ 是的,我也是看的这个,从项目主页 readme 跳过去的。 > 但是校验器确实应该去掉 那其他 DNS Provider 是不是也有这个问题,我没一个一个去看,要不全部去掉算了。 顺便问下,当初集成 acme 的时候,为啥选择集成 go-acme 项目,没选择 acme.sh 项目呢,我感觉 acme,sh 的功能挺强大的。
Author
Owner

@0xJacky commented on GitHub (Dec 11, 2023):

两年前确实用的 acme.sh,但是为了适应不同的环境,改用 lego 直接集成进代码,后续会开发自定义 command,届时可以自行安装 acme.sh 并配置自己的命令

<!-- gh-comment-id:1850036945 --> @0xJacky commented on GitHub (Dec 11, 2023): 两年前确实用的 acme.sh,但是为了适应不同的环境,改用 lego 直接集成进代码,后续会开发自定义 command,届时可以自行安装 acme.sh 并配置自己的命令
Author
Owner

@0xJacky commented on GitHub (Dec 11, 2023):

而且 acme.sh 还带一个 Python,不太优雅

<!-- gh-comment-id:1850042822 --> @0xJacky commented on GitHub (Dec 11, 2023): 而且 acme.sh 还带一个 Python,不太优雅
Author
Owner

@leic4u commented on GitHub (Dec 11, 2023):

好的,了解了。那我感觉自定义通知这个功能是不是一时半会儿不好实现了,我开始还以为用的 acme.sh,那直接加个配置页面就行了呢,但是这个 go-acme/lego 项目好像没有实现通知的功能。

<!-- gh-comment-id:1850051064 --> @leic4u commented on GitHub (Dec 11, 2023): 好的,了解了。那我感觉自定义通知这个功能是不是一时半会儿不好实现了,我开始还以为用的 acme.sh,那直接加个配置页面就行了呢,但是这个 go-acme/lego 项目好像没有实现通知的功能。
Author
Owner

@0xJacky commented on GitHub (Dec 11, 2023):

未来可期

<!-- gh-comment-id:1850052775 --> @0xJacky commented on GitHub (Dec 11, 2023): 未来可期
Author
Owner

@0xJacky commented on GitHub (Dec 12, 2023):

好了,去掉了

<!-- gh-comment-id:1852149293 --> @0xJacky commented on GitHub (Dec 12, 2023): 好了,去掉了
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/nginx-ui#4552
No description provided.