Skip to main content

Configure Let's Encrypt DNS-01 and issue a certificate

POST 
/settings/network/lets-encrypt

Required role: admin. Only an account or token with the admin role can call this operation.

Example request
curl --request POST \
  --header "Authorization: Bearer $HOSERVA_TOKEN" \
  --header "Content-Type: application/json" \
  --data @body.json \
  "https://$HOSERVA_HOST:8008/api/v1/settings/network/lets-encrypt"

Stores the domain and DNS-01 provider credentials (encrypted at rest) and queues an acme_issue job that talks to the ACME directory over DNS-01 only. Ports 80 and 443 are never claimed. HTTP-01 and TLS-ALPN-01 are not offered. On success the issued certificate replaces the self-signed cert on :8008. Unattended renewal stays armed while letsEncrypt.enabled is true. A failed issue or renew keeps serving the existing certificate and notifies; it never silently falls back to a new self-signed cert.

Request​

Responses​

The queued or running ACME issue job.