Skip to content

DNS01 Challenge Fields

Changes in sing-box 1.14.0

ttl
propagation_delay
propagation_timeout
resolvers
override_domain

Changes in sing-box 1.13.0

alidns.security_token
cloudflare.zone_token
acmedns

Structure

{
  "ttl": "",
  "propagation_delay": "",
  "propagation_timeout": "",
  "resolvers": [],
  "override_domain": "",
  "provider": "",

  ... // Provider Fields
}

Fields

ttl

Since sing-box 1.14.0

The TTL of the temporary TXT record used for the DNS challenge.

propagation_delay

Since sing-box 1.14.0

How long to wait after creating the challenge record before starting propagation checks.

propagation_timeout

Since sing-box 1.14.0

The maximum time to wait for the challenge record to propagate.

Set to -1 to disable propagation checks.

resolvers

Since sing-box 1.14.0

Preferred DNS resolvers to use for DNS propagation checks.

override_domain

Since sing-box 1.14.0

Override the domain name used for the DNS challenge record.

Useful when _acme-challenge is delegated to a different zone.

provider

The DNS provider. See below for provider-specific fields.

Provider Fields

Alibaba Cloud DNS

{
  "provider": "alidns",
  "access_key_id": "",
  "access_key_secret": "",
  "region_id": "",
  "security_token": ""
}
security_token

Since sing-box 1.13.0

The Security Token for STS temporary credentials.

Cloudflare

{
  "provider": "cloudflare",
  "api_token": "",
  "zone_token": ""
}
zone_token

Since sing-box 1.13.0

Optional API token with Zone:Read permission.

When provided, allows api_token to be scoped to a single zone.

ACME-DNS

Since sing-box 1.13.0

{
  "provider": "acmedns",
  "username": "",
  "password": "",
  "subdomain": "",
  "server_url": ""
}

See ACME-DNS for details.