Add DNS provider for SelfHost.(de|eu)

[ldez]

• adds a description to your PR
• have a homogeneous design with the other providers
• add tests (units)
• add tests ("live")
• add a provider descriptor
• generate CLI help, documentation, and readme.
• be able to do: (and put the output of this command to a comment)

  make build
  rm -rf .lego
  
  SELFHOSTDE_USERNAME=xxx \
  SELFHOSTDE_PASSWORD=yyy \
  SELFHOSTDE_RECORDS_MAPPING=example.com:123:456 \
  ./dist/lego -m [email protected] --dns selfhostde -d *.example.com -d example.com -s https://acme-staging-v02.api.letsencrypt.org/directory run

  Note the wildcard domain is important.
• pass the linter
• do go mod tidy

Ping @aifrog, can you run the command (with your domain, email, credentials, etc.)?

-> #2278 (comment)

Closes #2277

[ldez]

You need to create 2 TXT records for the same domain (_acme-challenge.example.com) to have 2 different IDs.

SELFHOSTDE_USERNAME=xxx \
SELFHOSTDE_PASSWORD=yyy \
SELFHOSTDE_RECORDS_MAPPING=example.com:<RECORD_ID1>:<RECORD_ID2>  \
./dist/lego -m [email protected] --dns.resolvers 1.1.1.1 --dns selfhostde -d *.example.com -d example.com -s https://acme-staging-v02.api.letsencrypt.org/directory run

[aifrog]

Thats it. Works:

SELFHOSTDE_USERNAME=1234 SELFHOSTDE_PASSWORD=1234 SELFHOSTDE_RECORDS_MAPPING=bbb.ccc:1234:1234 SELFHOSTDE_PROPAGATION_TIMEOUT=240 SELFHOSTDE_POLLING_INTERVAL=30 ./dist/lego -m [email protected] --dns.resolvers 1.1.1.1 --dns selfhostde -d *.bbb.ccc -d bbb.ccc -s https://acme-staging-v02.api.letsencrypt.org/directory run
2024/09/19 23:10:30 No key found for account [email protected]. Generating a P256 key.
2024/09/19 23:10:30 Saved key to /home/xxx/lego/.lego/accounts/acme-staging-v02.api.letsencrypt.org/[email protected]/keys/[email protected]
2024/09/19 23:10:31 Please review the TOS at https://letsencrypt.org/documents/LE-SA-v1.4-April-3-2024.pdf
Do you accept the TOS? Y/n
Y
2024/09/19 23:10:35 [INFO] acme: Registering account for [email protected]
!!!! HEADS UP !!!!

Your account credentials have been saved in your Let's Encrypt
configuration directory at "/home/xxx/lego/.lego/accounts".

You should make a secure backup of this folder now. This
configuration directory will also contain certificates and
private keys obtained from Let's Encrypt so making regular
backups of this folder is ideal.
2024/09/19 23:10:35 [INFO] [*.bbb.ccc, bbb.ccc] acme: Obtaining bundled SAN certificate
2024/09/19 23:10:36 [INFO] [*.bbb.ccc] AuthURL: https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/14075870753
2024/09/19 23:10:36 [INFO] [bbb.ccc] AuthURL: https://acme-staging-v02.api.letsencrypt.org/acme/authz-v3/14075870763
2024/09/19 23:10:36 [INFO] [*.bbb.ccc] acme: use dns-01 solver
2024/09/19 23:10:36 [INFO] [bbb.ccc] acme: Could not find solver for: tls-alpn-01
2024/09/19 23:10:36 [INFO] [bbb.ccc] acme: Could not find solver for: http-01
2024/09/19 23:10:36 [INFO] [bbb.ccc] acme: use dns-01 solver
2024/09/19 23:10:36 [INFO] [*.bbb.ccc] acme: Preparing to solve DNS-01
2024/09/19 23:10:51 [INFO] [bbb.ccc] acme: Preparing to solve DNS-01
2024/09/19 23:10:53 [INFO] [*.bbb.ccc] acme: Trying to solve DNS-01
2024/09/19 23:11:23 [INFO] Wait for propagation [timeout: 4m0s, interval: 30s]n. [nameservers=1.1.1.1:53]
2024/09/19 23:11:31 [INFO] [*.bbb.ccc] The server validated our request
2024/09/19 23:11:31 [INFO] [bbb.ccc] acme: Trying to solve DNS-01
2024/09/19 23:11:31 [INFO] [bbb.ccc] acme: Checking DNS record propagation. [nameservers=1.1.1.1:53]
2024/09/19 23:12:01 [INFO] Wait for propagation [timeout: 4m0s, interval: 30s]
2024/09/19 23:12:07 [INFO] [bbb.ccc] The server validated our request
2024/09/19 23:12:07 [INFO] [*.bbb.ccc] acme: Cleaning DNS-01 challenge
2024/09/19 23:12:08 [INFO] [bbb.ccc] acme: Cleaning DNS-01 challenge
2024/09/19 23:12:08 [INFO] [*.bbb.ccc, bbb.ccc] acme: Validations succeeded; requesting certificates
2024/09/19 23:12:08 [INFO] Wait for certificate [timeout: 30s, interval: 500ms]
2024/09/19 23:12:10 [INFO] [*.bbb.ccc] Server responded with a certificate.

[dmke]

I've reworded the documentation a bit. Let me know if you disagree or have further notes. Otherwise this looks OK. 👍

[aifrog]

Just a short question: I want to use this in traefik and do have v3.2.0-rc1 running. However, i still get the error="cannot get ACME client unrecognized DNS provider: selfhostde". Is this a configuration issue or is this code not yet part of v3.2.0-rc1?

[ldez]

The provider is not yet available inside Traefik.

I should create a release of lego before.

[aifrog]

I understand, that you have released by now. Correct? But I can't see it yet in traefik (v3.2.0-rc2). Do I need to wait or is it my mistake?

[ldez]

lego has been updated inside Traefik, but you must wait for the next Traefik release.