Certbot with DNS validation and tinydns

certbot.sh

#!/bin/bash

DOMAIN="example.tld"

certbot certonly -n --preferred-challenges dns --manual --manual-public-ip-logging-ok --manual-auth-hook /usr/local/bin/tinydns-certbot-enable --manual-cleanup-hook /usr/local/bin/tinydns-certbot-disable -d $DOMAIN -d \*.$DOMAIN

tinydns-certbot-disable.sh

#!/bin/bash
# From https://blog.fugue88.ws/archives/2019-03/certbot-and-tinydns

cd /etc/tinydns

sed -ri '/^# BEGIN CERTBOT AUTH$/,/^# END CERTBOT AUTH$/d' data

make

tinydns-certbot-enable.sh

#!/bin/bash
# From https://blog.fugue88.ws/archives/2019-03/certbot-and-tinydns

cd /etc/tinydns

cat <<EOF >> data
# BEGIN CERTBOT AUTH
'_acme-challenge.$CERTBOT_DOMAIN:$CERTBOT_VALIDATION
# END CERTBOT AUTH
EOF

export -n CERTBOT_VALIDATION

make