Cloudflare API token with acme.sh here. Token scoped to Zone:Read and DNS:Edit for just that zone. Stored in a file with 600 permissions. Ran fine for two years across three servers. The token never leaves the machine, and if leaked the blast radius is one zone.
Post a reply
You need an account to reply.
Log in or
register to join the conversation.
