NginxProxyManager / NginxProxyManager/nginx-proxy-manager

AWS Route53 DNS Challenge Issue Due to Propagation

Open
#5,414 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
TypeScript
Stars
34.2k
Forks
3.9k
Avg merge
21h 12m
Merged PRs (30d)
20

Description

I am running into an issue using the DNS challenge in AWS and I believe the previous place I posted on is now closed. The DNS challenge with AWS was working for me before, but as of the last few months, I'm getting the following when trying to get a new cert for a domain with DNS challenge in Route53. It happens whether I leave the propagation field blank or put in a value.

Version:

docker inspect npm | grep -i version
                "OPENRESTY_VERSION=1.27.1.2",
                "CROWDSEC_OPENRESTY_BOUNCER_VERSION=0.1.7",
                "NPM_BUILD_VERSION=2.14.0",
                "com.docker.compose.version": "5.0.2",
                "org.label-schema.schema-version": "1.0"

image: jc21/nginx-proxy-manager:latest

Log:

[3/17/2026] [1:39:27 PM] [Nginx    ] › ℹ  info      Reloading Nginx
[3/17/2026] [1:39:28 PM] [Certbot  ] › ▶  start     Installing route53...
[3/17/2026] [1:39:32 PM] [Certbot  ] › ☒  complete  Installed route53
[3/17/2026] [1:39:32 PM] [SSL      ] › ℹ  info      Requesting LetsEncrypt certificates via Route 53 (Amazon) for Cert #46: <redacted>
[3/17/2026] [1:39:32 PM] [SSL      ] › ℹ  info      Command: certbot certonly --config /etc/letsencrypt.ini --work-dir /tmp/letsencrypt-lib --logs-dir /data/logs --cert-name npm-46 --agree-tos -m <redacted> --preferred-challenges dns --domains <redacted> --authenticator dns-route53 --dns-route53-propagation-seconds
[3/17/2026] [1:39:34 PM] [Nginx    ] › ℹ  info      Reloading Nginx
[3/17/2026] [1:39:35 PM] [Express  ] › ⚠  warning   usage:
  certbot [SUBCOMMAND] [options] [-d DOMAIN] [-d DOMAIN] ...

Certbot can obtain and install HTTPS/TLS/SSL certificates.  By default,
it will attempt to use a webserver both for obtaining and installing the
certificate.
certbot: error: unrecognized arguments: --dns-route53-propagation-seconds

[3/17/2026] [1:42:46 PM] [Nginx    ] › ℹ  info      Reloading Nginx
[3/17/2026] [1:42:47 PM] [Certbot  ] › ▶  start     Installing route53...
[3/17/2026] [1:42:50 PM] [Certbot  ] › ☒  complete  Installed route53
[3/17/2026] [1:42:50 PM] [SSL      ] › ℹ  info      Requesting LetsEncrypt certificates via Route 53 (Amazon) for Cert #47: <redacted>
[3/17/2026] [1:42:51 PM] [SSL      ] › ℹ  info      Command: certbot certonly --config /etc/letsencrypt.ini --work-dir /tmp/letsencrypt-lib --logs-dir /data/logs --cert-name npm-47 --agree-tos -m <redacted> --preferred-challenges dns --domains <redacted> --authenticator dns-route53 --dns-route53-propagation-seconds 60
[3/17/2026] [1:42:53 PM] [Nginx    ] › ℹ  info      Reloading Nginx
[3/17/2026] [1:42:54 PM] [Express  ] › ⚠  warning   usage:
  certbot [SUBCOMMAND] [options] [-d DOMAIN] [-d DOMAIN] ...

Certbot can obtain and install HTTPS/TLS/SSL certificates.  By default,
it will attempt to use a webserver both for obtaining and installing the
certificate.
certbot: error: unrecognized arguments: --dns-route53-propagation-seconds 60

Originally posted by @bjmaynard01 in #4702

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start from the certificate request command shown in the issue and trace how the Route53 DNS challenge's propagation setting is passed to Certbot. Check the Route53 challenge integration and reproduce with the blank and 60-second propagation values; done means the generated command uses a supported option and the certificate request proceeds without the reported argument error.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, docker
Domain
cloud, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.