POST /target-update-lets-encrypt

Protection from accidental deletion of this object [true/false]

Description of the object

Fixed wait after TXT publish (e.g. 30s, 2m). If omitted with pre-check on, no extra sleep (polling only). If omitted with --dns-skip-precheck, gateway uses 30s. DNS challenge only

Skip DNS TXT pre-check before CA validation. If --dns-propagation-wait is omitted and this flag is set, gateway waits 30s before CA validation. DNS challenge only

Name of existing cloud target for DNS credentials. Required when acme-challenge=dns. Supported: AWS, Azure, GCP, Cloudflare targets

Per-query DNS lookup timeout during pre-check (e.g. 10s), not total poll time. If omitted with pre-check on, Lego library default applies (10s per query on Linux). Ignored when --dns-skip-precheck is set. DNS challenge only

Cloudflare DNS zone identifier. Required when dns-target-creds points to Cloudflare target

Email address for ACME account registration

GCP Cloud DNS: Project ID. Optional - can be derived from service account

AWS Route53 hosted zone ID. Required when dns-target-creds points to AWS target

Set output format to JSON

Whether to keep previous version [true/false]. If not set, use default according to account settings

The name of a key that used to encrypt the target secret value (if empty, the account default protectionKey key will be used)

Lock this secret after each successful value read

Lock TTL in minutes

Set the maximum number of versions, limited by the account settings defaults.

Target name

New target name

Azure resource group name. Required when dns-target-creds points to Azure target

Rotate this secret after it is unlocked

Authentication token (see /auth and /configure)

The universal identity token, Required only for universal_identity authentication