Hacker News Reader

effort / gain ratio is crap tho. Especially assuming IPv4 and reasonable firewalling.

effort is basically none, aside from getting an API key from Cloudflare(could be any provider really) and then downloading the version of Caddy that includes supports Cloudflare DNS verification

in terms of gains you get the benefit of easy to remember names, and you don't share everything in plaintext which is becoming more and more important as we get more and more devices on our LANs

FWIW, the setup can be simpler and more portable without a specialized HTTP server and with a standardized protocol (RFC 2136): just certbot and its python3-certbot-dns-rfc2136.

Edit: certbot has plugins for a bunch of custom APIs too.

Reply on news.ycombinator.com