NginxProxyManager / NginxProxyManager/nginx-proxy-manager

Centralized DNS Provider / ACME Configuration Profiles

Open
#5,652 1 comment 2 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement
Dominant language
TypeScript
Stars
34.2k
Forks
3.9k
Avg merge
21h 12m
Merged PRs (30d)
20

Description

The problem

Currently, when requesting Let's Encrypt certificates via DNS-01 challenge, users have to manually enter the provider-specific configuration (such as API keys, tokens, custom DNS servers, and propagation delays) every single time for each new certificate.
​For environments with multiple domains or frequent certificate additions, this approach is repetitive, error-prone, and makes updating rotated API keys tedious, as they have to be changed individually per certificate.

​Proposed Solution

​Introduce a centralized "DNS Profiles" or "ACME Configurations" management tab within the Nginx Proxy Manager UI (similar to how Access Lists or SSL Certificates are managed).

  1. Centralized Storage: Define and save a DNS provider configuration once (e.g., Cloudflare API Token, Hetzner API Key, local RFC 2136 TSIG keys, custom DNS servers).
  2. Define and save a DNS provider configuration once (e.g., Cloudflare API Token, Hetzner API Key, local RFC 2136 TSIG keys, custom DNS servers).
  3. ​Reusability: When adding or renewing an SSL certificate via DNS-01, instead of filling out the text area manually, the user can simply select a predefined profile from a dropdown menu.
  4. ​Global Updates: If an API key or a propagation delay needs to be adjusted, it can be updated in the central profile, instantly applying to all associated certificates.
​Alternative Solutions Considered

​Manually copying and pasting configuration strings from an external password manager or documentation every time a new certificate is created.

​Additional Context

​This feature would massively improve the UX for power users, DevOps setups, and home lab environments that rely heavily on automated wildcard certificates via ACME / RFC 2136 DNS challenges.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No files or tests are named. Start by tracing the existing SSL Certificates and Access Lists management flows, then determine how DNS profiles would be stored and associated with certificates. Done means users can define a provider configuration once, select it for DNS-01 certificates, and update it centrally for associated certificates.

Written by the indexing model from the issue text.

Assessment

Tech stack
nginx, typescript
Domain
backend, frontend, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Quiet
Clarity
Needs clarification
Newbie friendliness
38/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.