Hi!

Maybe someone can help me with a problem I’m having, vaguely related to self hosting.

I want to use a domain with let’s encrypt certificates locally. I realise the only way to do this is a (automated) DNS-01 challenge if I don’t want to expose anything to the outside.

Those DNS challenges require my name server to have some kind of API to automate the process. My registrar/name server doesn’t have a API unfortunately.

I want to use the opportunity to switch my registrar and name server in one go, but I’m pretty picky…

My wish list is:

  • MFA for general account administration
  • scoped tokens or account for API access (don’t need or want to manage everything by API)
  • can handle .at domains
  • not cloudflare
  • registrar and name server should be one entity if possible
  • european if possible
  • supported by ngnix proxy manager if possible

Backup plan would be picking a registrar which supports DNSSEC for .at domains and use desec.io I guess.

But maybe the hive mind has a good recommendation for me? :)

Thank you in advance for reading! I’m aware I’m just a bit extra, but i want to be able to just ignore the whole name server and domain topic for the next ten years again if I can.

Cheers!

  • dieTasse@feddit.org
    link
    fedilink
    English
    arrow-up
    1
    ·
    13 hours ago

    Yeah, I tried infomaniak and they were doing kyc on me. I aint uploading my id to a domain company. Apparently they do this often (not always) and they can do it any time and take your access if you dont comply.

    • talkingpumpkin@lemmy.world
      link
      fedilink
      English
      arrow-up
      1
      ·
      8 hours ago

      I don’t remember them asking for any ID. Then again I gave them my real name/address and I payed with my credit card so… it’s not like they can’t confirm it’s me.

      • dieTasse@feddit.org
        link
        fedilink
        English
        arrow-up
        2
        ·
        5 hours ago

        I did the same. I was not hiding any details. After I asked them about it, they said that they have to do it by law. After I told them I won’t give them my id they returned my money and that was that. I don’t see why there has to be kyc on normal domain…