

$ grep -i "dns" /etc/letsencrypt/renewal/enter.domain.here.conf
authenticator = dns-netcup
dns_netcup_credentials = /path/to/netcup/credentials.ini
AFAICT it is using DNS challenges, unless the cerbot netcup plugin somehow does stuff it shouln’t need to do.








Well, blocking inbound traffic from these countires is part of my firewall. I have some services that are exposed on the internet, but I don’t want the whole world to hammer these services, scrape them and potentially exploit vulnerabilities on them. I know a VPN would be more effective here, but that’s not an option for every service.