HTTPS certificates (Let's Encrypt)

Logged in, the setup assistant fills in your own host name and token.

Get a Let's Encrypt certificate for <your-host>.dynr.net and *.<your-host>.dynr.net without opening any port: the DNS-01 challenge sets a TXT record through dynr.net. It uses the same host name and token as your router.

dynr.net offers POST https://dynr.net/acme/present and /acme/cleanup (JSON fqdn and value, HTTP Basic authentication), compatible with lego's httpreq provider.

lego

HTTPREQ_ENDPOINT=https://dynr.net/acme \
HTTPREQ_USERNAME=<your-host>.dynr.net \
HTTPREQ_PASSWORD=<your-token> \
lego --email you@example.com --dns httpreq \
  --domains <your-host>.dynr.net --domains '*.<your-host>.dynr.net' run

Traefik

Set the same three variables in Traefik's environment and use the DNS challenge with provider httpreq:

certificatesResolvers:
  dynr:
    acme:
      email: you@example.com
      storage: /letsencrypt/acme.json
      dnsChallenge:
        provider: httpreq

HTTPREQ_ENDPOINT=https://dynr.net/acme
HTTPREQ_USERNAME=<your-host>.dynr.net
HTTPREQ_PASSWORD=<your-token>

Limits

At most 4 TXT values per host at once and 10 requests per minute.