inwx: local DNS doesn't answer to SOA calls about lego HOT 4 CLOSED

To explain why lego does SOA calls: the goal is to find the right place to create the TXT records, a user can have domains on several zones, so the automatic detection (through SOA calls) allows to handle that.

Without this detection, only one zone will be handled and should be provided by the user, in the majority of cases this will lead to a failure of the DNS challenge because it will be impossible to create TXT records.

from lego.

Hello,

your problem is related to your DNS configuration, I never use OPNsense or Unbound so I will not be able to provide the way to configure it.

lego tries to find the zone by doing SOA calls, but as you notice, your DNS resolver doesn't answer those calls.

You should allow OPNsense/Unbound to answer those calls with the right information.

from lego.

OK thank you. I will try.

from lego.

I will close this issue but don't hesitate to add your solution as a comment for future OPNsense/Unbound users.

from lego.