You're probably using my overlay.
Yup, hi Osiris!
so I only update the package if there actually were changes made.
OK, so no, there's not some version lag somewhere. Thanks.
This, by the way, is mentioned quite clearly on the DNS plugin documentation at Welcome to certbot-dns-cloudflare’s documentation! — certbot-dns-cloudflare 0 documentation
Yep! At the CloudFlare "API Tokens" page, hit the "Create Token" button;
- Edit zone DNS -> Use template:
- under Permissions, chose (default) Zone, DNS, Edit;
- under Zone Resources, chose Incude, Specific zone; that enables a dropdown, I selected the one I've been trying to enable;
As your page describes: once that was done, I needed to treat the offered string as:
dns_cloudflare_api_token = [secret]
...not what I was previously finding:
dns_cloudflare_api_key = [secret]
dns_cloudflare_email = [my address]
Much thanks as always. I have a new question but I'll put that in a new thread.