[PVE-User] ACME Cloudflare Managed DNS Issue

[Fabian Grünbichler]

On May 13, 2020 3:29 pm, Amin Vakil wrote:
> I've forgot to add errors:
> 
> Using CF_Account_ID and CF_Token:
> 
> [Wed May 13 17:56:58 +0430 2020] Error
> [Wed May 13 17:56:58 +0430 2020] Error add txt for
> domain:_acme-challenge.subdomain.domain.com
> TASK ERROR: command 'setpriv --reuid nobody --regid nogroup
> --clear-groups --reset-env -- /bin/bash
> /usr/share/proxmox-acme/proxmox-acme setup cf subdomain.domain.com'
> failed: exit code 1
> 
> Using CF_Email and CF_Key:
> 
> [Wed May 13 17:59:03 +0430 2020] Error
> [Wed May 13 17:59:03 +0430 2020] Error add txt for
> domain:_acme-challenge.subdomain.domain.com
> TASK ERROR: command 'setpriv --reuid nobody --regid nogroup
> --clear-groups --reset-env -- /bin/bash
> /usr/share/proxmox-acme/proxmox-acme setup cf subdomain.domain.com'
> failed: exit code 1
> 
> On 5/13/20 5:56 PM, Amin Vakil wrote:
>> I've tested with global api key, specific api token which has full
>> access to zone.zone and zone.dns of all zones, tested
>> subdomain.domain.com, domain.com, let's encrypt and let's encrypt
>> staging and none of them works.
>> 
>> I've checked via http authentication everything goes fine, but I don't
>> to open my 80 port globally.
>> 
>> Is there an issue with this type of verification for now?
>> 
>> Best Regards,
>> Amin Vakil

see https://bugzilla.proxmox.com/show_bug.cgi?id=2733