ACME and RFC2136 updates instead of http validation

ivarh

I have moved my email to a self-hosted Mailcow container on a Debian12 VM running on my Mac. It works like a charm; however, I miss one thing: I have set up my nameserver that serves my domains to accept rfc2136 updates, and my opnsense uses this to generate its certificates. Is there any way to configure the ACME container to use rfc2136/dns01 authentification instead of using the local webserver to let lets-encrypt validate ownership of the domain?

esackbauer

That is not possible. However you could generate the LE certs on a different host and then copy them over to mailcow:
https://docs.mailcow.email/post_installation/firststeps-ssl/#how-to-use-your-own-certificate