ACME challenge type. Options: [dns]

Protection from accidental deletion of this object [true/false]

Description of the object

Fixed wait after TXT publish (e.g. 30s, 2m). If omitted with pre-check on, no extra sleep (polling only). If omitted with --dns-skip-precheck, gateway uses 30s. DNS challenge only

Name of existing cloud target for DNS credentials. Required when challenge type is dns. Supported providers: AWS, Azure, GCP, Cloudflare

Per-query DNS lookup timeout during pre-check (e.g. 10s), not total poll time. If omitted with pre-check on, Lego library default applies (10s per query on Linux). Ignored when --dns-skip-precheck is set. DNS challenge only

Cloudflare DNS zone identifier.
Required when DNS credentials target is Cloudflare

External Account Binding HMAC key (required for ACME account bootstrap on create)

External Account Binding key identifier (required for ACME account bootstrap on create)

Email address for ACME account registration

GCP Cloud DNS project ID. Optional and can be derived from service account

Google Trust directory environment. Options: [production/staging]

AWS Route53 hosted zone ID.
Required when DNS credentials target is AWS

Whether to keep previous version [true/false]. If not set, use default according to account settings

The name of a key that used to encrypt the target secret value (if empty, the account default protectionKey key will be used)

Lock this secret after each successful value read

Lock TTL in minutes

Set the maximum number of versions, limited by the account settings defaults.

Target name

New target name

Azure resource group name. Required when DNS credentials target is Azure

Rotate this secret after it is unlocked

Timeout for challenge validation

Authentication token (see /auth and /configure)

The universal identity token, Required only for universal_identity authentication