Re:TLS certificates for internal services done right
by sigio on Thursday July 09, 2026 @05:50PM
(#48852829)
You can even put it in a seperate zone (which I do) by using a CNAME for _acme-challenge.domain.tld.
I have it to a seperate subdomain, which is served by a seperate desec.io account, which is only used for this specific subdomain.
[ Parent
| on HN ]
Re:TLS certificates for internal services done right
by mrl5 on Friday July 10, 2026 @10:25AM
(#48860429)
TIL, thanks! This makes dns challange automation more approachable for me. I always had an issue with API keys which scope can't be limited to TXT records. This seems to be a nice workaround
... and it is even already documented at https://github.com/acmesh-official/acme.sh/wiki/DNS-alias-mo...