ACME Plugin - Hetzner "DNS Console is moving to the Hetzner Console"

[touro411]

Hello,

Hetzner is migrating DNS management to the Cloud Console. This means new API keys must be created.

Has anyone had any experience with whether the new API keys also work with the current ACME plugin?

Kind Regards
touro411

 

[bobaflash]

Maybe this link will help:
https://github.com/acmesh-official/acme.sh/wiki/dnsapi2#dns_hetznercloud

Update:
Actually it is not merged. I hope it will be soon. I'm also waiting for this

https://github.com/acmesh-official/acme.sh/pull/6563

Update:
Hacky workaround...

1. Download the file from the merge request and put it into the folder /usr/share/proxmox-acme/dnsapi/
2. add following to the file /usr/share/proxmox-acme/dns-challenge-schema.json

"hetznercloud": {},

I put i directly after the hetzer entry...
3. Reboot Proxmox. Just rebooting the pveproxy didn't work for me
4. After this you can configure hetznercloud from the UI

But as mentioned: no recommendation... I don't know what it will break in the future. For the moment it work just fine for me

 

[Der Harry]

There is some urgency now to this topic, as you can't create new Domains in the legacy system.

I can confirm your patch is working. We updated our Ansible scripts to add the hack as temporary solution

 

[Der Harry]

Here a bit of an update:

- I created this thread in bugzilla for Proxmox. https://bugzilla.proxmox.com/show_bug.cgi?id=7028
- I kindly ask in github to merge the PR of acme.sh
- The PR is now in the dev branch: https://github.com/acmesh-official/acme.sh/blob/dev/dnsapi/dns_hetznercloud.sh

If you have the urgency - it's ok to do what @bobaflash suggests. We will get the official version very soon.

Thanks everybody!

 

[Der Harry]

3. Reboot Proxmox. Just rebooting the pveproxy didn't work for me

```bash
systemctl restart pveproxy
```

This works - but - you have to refresh the browser (Shift + Reload in Chrome)

 

[Der Harry]

It's now officially merged to master: https://github.com/acmesh-official/acme.sh/blob/master/dnsapi/dns_hetznercloud.sh

 

[Udbytossen]

Hi guys.
I've also have my domains at hetzner moving to hetzner cloud, and I can make it work on my PFsense, but can not add it as described as a hacky workaround above.

System is running : pve-manager/9.1.2/9d436f37a0ac4172 (running kernel: 6.8.12-15-pve)

But after adding the dns_hetznercloud.sh and change rights as the other plugins, and adding the line to dns-challenge-schema.json - as described
I can choose the plugin in the dropdown(Token is generated in the new DNS console at hetzner)

But when trying to add the plugin as available I'm getting this error:


Accoording to acme github page https://github.com/acmesh-official/acme.sh/wiki/dnsapi2#dns_hetznercloud its should be possible to run - but on this server the only acme.sh is /usr/share/proxmox-acme - but following this information in the bottom make no sense

 call setup and teardown direct
# the parameter must be set in the correct order
# $1 <String> DNS Plugin name
# $2 <String> Fully Qualified Domain Name
# $3 <String> value for TXT record
# $4 <String> DNS plugin auth and config parameter separated by ","
# $5 <Integer> 0 is off, and the default all others are on.

So not sure what to do from here - to get the hetznecloud up and running - so any help is appriciated
TIA
U

 

[Der Harry]

I can choose the plugin in the dropdown(Token is generated in the new DNS console at hetzner)

The Token needs to created as API Token in the Console.

Security -> API-Token (I have mine as read/write)

 

[Udbytossen]

That was what I meant - I've created the token in the New Console - under Security - API token - set as read/write
So I followed that as described

 

[Der Harry]

Works (for me) - I have no " just the token

 

[Udbytossen]

Wau - its the same butn just not working here. - But thanks for the input

 

[Der Harry]

Works (for me) - I have no " just the token

^^^^ did you read this line? no "

 

[Udbytossen]

I have the same only - HETZNER_TOKEN=XXXXXXXXXXXXXX no "" - still the same error
And afterwards i'm seeing this - where the hetznercloud is marked as red?

So my guess its something with the dns_hetznercloud.sh. So don't know why - same size yours file and just downloaded.