Docker container for creating and renewing (wildcard) certificates on OVH DNS

As of Certbot 0.26 an OVH plugin has been included. See official changelog on certbot/certbot.

To build the container simply run the following command:

docker build -t certbot-dns-ovh .

An official image is also available on docker's hub:

docker pull weaverize/certbot-dns-ovh

Go to https://api.ovh.com/createToken/ and create an application token with the following rights:

• For /domain verbs GET, POST, PUT and DELETE (basically all)
• For /domain/* verbs GET, POST, PUT and DELETE (basically all)

You should use an OVH account that has the corresponding rights, obviously.

The certificate creation and renewal is fully automatic.

You can provide the OVH API credentials using an ovh.conf file, as describe in https://github.com/ovh/python-ovh#2-configure-your-application. You can also use environment variables instead like in the following example:

docker run -it --rm \
	-v $PWD/certs:/etc/letsencrypt \
	-v $PWD/lib:/var/lib/letsencrypt \
	-e OVH_ENDPOINT=<replace by endpoint> \
	-e OVH_APPLICATION_KEY=<replace by key> \
	-e OVH_APPLICATION_SECRET=<replace by secret> \
	-e OVH_CONSUMER_KEY=<replace by consumer key> \
	weaverize/certbot-dns-ovh \
		certonly \
		--server https://acme-v02.api.letsencrypt.org/directory \
		--preferred-challenges dns-01 \
		-a certbot-dns-ovh:dns-ovh \
		--email <[email protected]> \
		--agree-tos \
		--no-eff-email \
		-d "<yourdomain>"
		-d "<yourotherdomain>"

To be able to create wildcard certificates you have to use the following endpoint (like in the example above):

https://acme-v02.api.letsencrypt.org/directory

Inspired by mcdado/certbot-dns-ovh and antoiner77/letsencrypt.sh-ovh

Copyright (c) 2018, Weaverize SAS. All rights reserved. Contact: [email protected].