A container that renews TLS certifications from Let's Encrypt via DNS verification when certificate expiration is near.
Environment variables accepted for configuration:
| Variable name | Description | Default |
|---|---|---|
EMAIL |
Valid email address used to identify a Let's Encrypt account. | ⭐ required |
AZ_COORDINATOR_ADDR |
Protocol, hostname, and port used to communicate with an az-coordinator daemon. Format: https://hostname.net:8443. |
⭐ required |
AZ_COORDINATOR_TOKEN |
Authentication token to supply with az-coordinator requests. |
empty |
FORCE |
If "yes", a new certificate will be issued even if the current one has not expired. |
empty |
LE_PRODUCTION |
If "yes", a production certificate will be issued instead of a staging one. |
empty |
If AZ_COORDINATOR_TOKEN or AZ_COORDINATOR_ADDR are missing or blank, a secrets file compatible with az-coordinator set-secrets will be written to /etc/letsencrypt/secrets.json instead. Mount this path as a Docker volume to access the generated certificates.