This project consists of the Python library kasserver and a few command line utilities to manage domains of the German webhoster All-Inkl.com through their KAS server API.
At the moment the main focus is managing DNS record as this allows to automate the creation of Let's Encrypt (wildcard) certificates with the ACME DNS-01 challenge.
kasserver (and its dependencies) can be installed from PyPI with:
pip3 install kasserver
Both library and command line utilities require access to the KAS credentials.
Username and password are read from the KASSERVER_USER
and
KASSERVER_PASSWORD
environment variables or from the ~/.netrc
file:
machine kasapi.kasserver.com
login USERNAME
password PASSWORD
The file must be accessible only by your user account: chmod 600 ~/.netrc
.
A generic program to manage DNS records.
DNS records can be listed with:
$ kasserver-dns list example.com
ID C Zone Name Type Data Aux
1 Y example.com A X.X.X.X 0
0 N example.com NS ns5.kasserver.com. 0
0 N example.com NS ns6.kasserver.com. 0
0 N example.com www CNAME example.com 0
A new DNS record is added with:
kasserver-dns add test.example.com CNAME example.com
An existing DNS record is removed with:
kasserver-dns remove test.example.com CNAME
The following programs are designed to be used together with ACME clients to automate DNS record creation/removal as it is required by a Let's Encryt ACME DNS-01 challenge for automatic certificate renewal.
This program is designed to be used with Certbot:
certbot certonly -d foo.exmaple.com --preferred-challenges dns \
--manual --manual-auth-hook kasserver-dns-certbot \
--manual-cleanup-hook kasserver-dns-certbot \
-m [email protected]
This program is designed to be used with lego:
EXEC_PATH=kasserver-dns-lego lego --dns exec \
--domains foo.example.com --email [email protected] run
This projected is licensed under the terms of the MIT license.