github-repos/acme.sh
1
0
Fork 0
mirror of https://github.com/acmesh-official/acme.sh.git synced 2025-03-14 16:10:09 +08:00
Code Issues Packages Projects Releases Wiki Activity

Cloudflare: Document that permissions can be further restricted by use of CF_Zone_ID

alexzorin 2020-03-13 14:38:13 +11:00
parent db6b18e200
commit 4a3fbedf98
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
dnsapi.md

@ -22,6 +22,13 @@ export CF_Account_ID="xxxxxxxxxxxxx"
```
In order to use the new token, the token currently needs access read access to Zone.Zone, and write access to Zone.DNS, across all Zones. See [Issue #2398](https://github.com/Neilpang/acme.sh/issues/2398) for more info.
To restrict permissions to the greatest extent possible, you can create an API Token with write access to Zone.DNS for a single domain, and then specify the `CF_Zone_ID` directly:
```
export CF_Token="sdfsdfsdfljlbjkljlkjsdfoiwje"
export CF_Account_ID="xxxxxxxxxxxxx"
export CF_Zone_ID="xxxxxxxxxxxxx"
```
Ok, let's issue a cert now:
```