Welcome to LetsDNS

Manage DANE TLSA records in DNS servers. Supports multiple domains with multiple TLS certificates each. LetsDNS can be invoked manually, from a periodic cron job, or called in a hook function of dehydrated or certbot.

Copyright © 2022-2025 Ralph Seichter. Hosted on GitHub.

• Example use cases
  • Mail Exchanger
  • Web Server
• Installation
  • Python package
  • Alternative: Virtual environment
• Configuration
• Operation
• Environment variables
• Dynamic actions
• Contributing
• Changelog
• License
• letsdns package
  • Submodules
  • letsdns.action module
    • Action
    • import_action()
    • import_class()
  • letsdns.configuration module
    • Config
    • init_logger()
    • log_level()
  • letsdns.core module
    • action_class()
    • traverse_config()
  • letsdns.crypto module
    • dane_tlsa_records()
    • read_x509_cert()
    • sha_digests()
  • letsdns.hetznerapi module
    • HetznerApiUpdate
  • letsdns.liveupdate module
    • DnsLiveUpdate
  • letsdns.nsupdate module
    • NsupdateStdout
  • letsdns.tlsa module
    • rdata_action_lifecycle()
    • record_name()
    • tlsa_records()
  • letsdns.util module
    • getenv()
    • is_sensitive()
    • is_truthy()
    • split()
  • Module contents

Indices and tables

• Index

• Module Index

• Search Page