NginxProxyManager / NginxProxyManager/nginx-proxy-manager

Feature Request: New Lets Encrypt dns-persist-01 Challange

Open
#5,328 2 comments 9 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement stale
Dominant language
TypeScript
Stars
34.2k
Forks
3.9k
Avg merge
21h 12m
Merged PRs (30d)
20

Description

Is your feature request related to a problem? Please describe.

I deployed NPM on a VPS and It would be really nice to use DNS Validation without the need of configuring DNS API Keys for that. My API provider doesn't let me break down permissions for a key so its basically full access.

Describe the solution you'd like

As far as I understand this is solved by this new LetsEncrypt Validation Method:
https://letsencrypt.org/2026/02/18/dns-persist-01

So it would be really nice if this could be implemented in future releases

Additional context

The Method is not rolled out yet but will come in the next months

Support for the draft specification is available now in Pebble, a miniature version of Boulder, our production CA software. Work is also in progress on a lego-cli client implementation to make it easier for subscribers to experiment with and adopt. Staging rollout is planned for late Q1 2026, with a production rollout targeted for some time in Q2 2026.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reading the linked Let's Encrypt dns-persist-01 specification and checking the repository's certificate-validation entry points; no implementation files or tests are named in the issue. Use Pebble and the lego-cli work as reference for the draft behavior, and define done as support for the method without requiring broad DNS API keys.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
backend, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Active
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.