Creating a certificate for subdomains

Help
9

That is indeed a possibility. I don't have experience with Google Domains nor with Google Cloud though. A different thread (Google Domains DNS API Support? (not Google Cloud DNS)) indeed confirms that Google Domains doesn't have an API.

A few options:

  • manually add and remove the TXT record every 60-90 days with aid of the --manual plugin (not recommended, cannot be automated!);
  • use acme-dns in combination with the acme-dns-auth.py script you already found;
  • switch DNS provider to a provider which does support an API and has a certbot DNS plugin available, such as Cloudflare. As far as I know, Cloudflares DNS service (without the registration part) is free of charge;
  • don't use a wildcard certificate if that gives you the possibility to use a non-DNS challenge.
4 Likes