|
@@ -37,7 +37,9 @@ An example file is provided in `/usr/local/etc/letsencrypt/certbot-pdns.json`:
|
37
|
37
|
{
|
38
|
38
|
"api-key": "change_it",
|
39
|
39
|
"base-url": "http://127.0.0.1:34022/api/v1",
|
40
|
|
- "axfr-time": 5
|
|
40
|
+ "axfr-time": 5,
|
|
41
|
+ "http-auth": ["user", "secret_pass"],
|
|
42
|
+ "verify-cert": "False"
|
41
|
43
|
}
|
42
|
44
|
```
|
43
|
45
|
|
|
@@ -49,6 +51,10 @@ Configuration keys:
|
49
|
51
|
- base-url: The base URL for PowerDNS API. Require `api=yes` and `api-readonly=no` in file `/etc/powerdns/pdns.conf`
|
50
|
52
|
- axfr-time: The time in seconds to wait for AXFR in slaves. Can be set to 0 if there is only one authoritative server for the zone.
|
51
|
53
|
|
|
54
|
+The following two keys are optional and added in case a (nginx) reverse proxy is used to secure access to the api:
|
|
55
|
+ - http-auth (optional): A list of two strings containing the Username and Password for a http-basic-authentication
|
|
56
|
+ - verify-cert (optional): defines whether the SSL-certificate provided by the reverse proxy shall be verified. Possible options are True/False or a string containing the path to a local certificate which can be used to verify the one provided by the proxy.
|
|
57
|
+
|
52
|
58
|
Usage
|
53
|
59
|
-----
|
54
|
60
|
|